last executing test programs: 6m21.148056521s ago: executing program 3 (id=4287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000cc0)=0x9) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x42000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0x8080) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063112000000000008510000002000000850001fda97200000500000095000000000000009500a505"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288a8", 0x8}], 0x2}, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1b, 0xb, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xd2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000840)='syzkaller\x00', 0x7f, 0xe6, &(0x7f0000000880)=""/230, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x20, r11, 0x8, &(0x7f00000009c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0xf, 0x4, 0x2}, 0x10, r12, r6, 0x8, &(0x7f0000000b40)=[r7, r8, r5, r7, r5, r5, r8], &(0x7f0000000b80)=[{0x5, 0x4, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x2, 0x1, 0x4, 0x1}, {0x2, 0x1, 0x6, 0xa}, {0x5, 0x2, 0x10, 0xc}, {0x4, 0x2, 0x1, 0xe}, {0x4, 0x5, 0x9, 0x1}, {0x2, 0x3, 0x10, 0x8}], 0x10, 0x9}, 0x94) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b10000009000000a0f4000000000080007620ab5f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r13}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000080)=@raw=[@ldst={0x3, 0x3, 0x6, 0x5, 0x2, 0x80, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r7, r8, r13], &(0x7f0000000440)=[{0x5, 0x5, 0xa, 0x7}, {0x1, 0x4, 0x10}, {0x2, 0x1, 0x3, 0x6}, {0x3, 0x3, 0x5, 0x2}, {0x3, 0x2, 0xf, 0x5}], 0x10, 0x5}, 0x94) 6m20.701371622s ago: executing program 3 (id=4290): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x75040000, 0x0, r4}, 0x48) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0x11, 0x0, 0x8}, 0x0, 0x0, r5, 0x2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) r8 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xe, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000012c0)="48000000140081fb60590c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8d96d6f", 0x48}], 0x1}, 0x24000014) 6m20.397256929s ago: executing program 3 (id=4293): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0xffffffff, 0x3a, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 6m20.258824842s ago: executing program 3 (id=4295): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff000000000000000000000000522ba9f0ca5598deb1b151"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=r5, 0x4a) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2000000020008107090f6b0a26f2000000000200000000000000001f102ec037", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$tipc(r8, &(0x7f0000000d00)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x4}}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000d40)="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", 0x155}, {&(0x7f0000000700)="1413acd1f47fb5c142c98f4227301daa31b0a921c9156f6deab19eb05d8469a1aec5c4200bd5504fee0e6949e75be04066cc52079525ee014523bc924e5e1d7d921d31b0742fecd90c145acbce5d4f4925ed2c7cfaacd17bc0db2e58c1e87fe4e1cfd84b4e5239987ba395b3261560068cb33cc343b34e4b40aa3f1ef5d1a9cc78418fc1c0dcbc39c4c60c73a754736e90671e6ecf00dcaea6b73b243753302f693e89a95e841af23c3f13fbcd64d41b273a0ffb1033ba62fd04938f55f2c1fbf470efdabf6b86f6cae70eceb698af57", 0xd0}, {&(0x7f0000000a40)="bf25fb0e32b8ff6fe0621aada5b9ec6770a734e10d389b9b05b2d550ff6c21d76892135384b04604fdadb3a02246ec617fc0d10ac0b07953536bf9e761b3468339ef8012b8fc34fcc76b6e0377becd98658e32648f2465c8341ca1b4136e523f8c0810b3ba4f4901e8d82fb0b64cefcf4b81bc01f9ad41e4975189e7aee9587bf69dbc4a6adc10fd008a11e24507dbd0d7ab65a23d95ca49b5a2e34a9c29b8", 0x9f}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)="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", 0xfc}, {&(0x7f0000000c40)}], 0x6, 0x0, 0x0, 0x50050}, 0x800) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) 6m19.985977799s ago: executing program 3 (id=4298): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd70, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x3, 0x0, 0xb, 0x0, 0xfffffffffffffff0, 0x8}], &(0x7f0000000280)='GPL\x00', 0x9, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x4, r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000007", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001700)=""/4094, 0xffe}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6m19.159619268s ago: executing program 3 (id=4302): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0xfffffc01, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r2, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000800), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x36, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='memory.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0xf, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x81, 0x19, &(0x7f0000000380)=""/25, 0x41100, 0x0, '\x00', r3, @fallback=0x3, r4, 0x8, &(0x7f0000000b80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0xa, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c80)=[{0x3, 0x1, 0xf, 0x2}], 0x10, 0x10000}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r3, r5, 0x5, 0x5, 0x5}, 0x50) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90924fc60100004000a110400053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4001, 0x0) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000d80)=""/4096) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x5, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex=r3, r4, 0x15, 0x2000, 0x0, @value=r4, @void, @void, @void, r9}, 0x20) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd) 6m3.482450163s ago: executing program 32 (id=4302): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0xfffffc01, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r2, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000800), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0x36, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='memory.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0xf, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x81, 0x19, &(0x7f0000000380)=""/25, 0x41100, 0x0, '\x00', r3, @fallback=0x3, r4, 0x8, &(0x7f0000000b80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0xa, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c80)=[{0x3, 0x1, 0xf, 0x2}], 0x10, 0x10000}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r3, r5, 0x5, 0x5, 0x5}, 0x50) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90924fc60100004000a110400053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4001, 0x0) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000d80)=""/4096) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x5, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex=r3, r4, 0x15, 0x2000, 0x0, @value=r4, @void, @void, @void, r9}, 0x20) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd) 22.18791892s ago: executing program 1 (id=5703): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x1, 0x0) (async) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x5}, 0x50) (async, rerun: 64) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0x8, 0x2, 0x9, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x34}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x6, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f00000005c0)=""/83, 0x4}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x2, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x1}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x66, 0x6}, @enum64={0x5, 0x8, 0x0, 0x13, 0x0, 0x0, [{0xd, 0x200, 0x1}, {0xf, 0x10001, 0x1}, {0x5, 0xce, 0x2}, {0x9, 0x2, 0x7}, {0xc, 0x20691, 0x4}, {0x8, 0x3, 0x4}, {0x2, 0x80, 0x75}, {0x400002, 0xd3d, 0x1}]}]}}, &(0x7f0000000c40)=""/3, 0xa6, 0x3, 0x1, 0x400}, 0x28) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r3}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x24051) close(r0) 21.965006675s ago: executing program 1 (id=5705): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c1}, 0x4000090) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000d00)="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", 0x51b}, {&(0x7f00000005c0)="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", 0x526}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 20.351572604s ago: executing program 0 (id=5711): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0x2}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x1, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f7fdffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000230000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x28, 0x2, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="b2b7e28bfde9b8eab0499cf0d3bfc7218d0f8f0854d0c2df40b97bd4b19477a5f23d0e160782bfa4fff702f078ceb7d890bb0b6929c8f2d83161f37e606daf0fa90b4606c62381ee3986a4c044c13671236af103ab895edcf841d1c203a58fa58108c1679b5dc4a02de54e22ea08118d4856550d15810ff842dd80850a8f56da7520c2b4a2a7e65a6f6af1e106253e6eeeea3faedabff4eb61d1b1426448bf279e47dda9d951966902e62694111e0acc2f862ece03e658238fe343d384c941891c46fbc0006db222e24987dc50a1295c061c93876ebd8926976d786b02cc8830de51", @ANYRESOCT=r7, @ANYRES8=r7, @ANYRES64=r6, @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES8=r4], 0x0, 0x1, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r11 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/188, 0xbc}, {&(0x7f0000000b40)=""/198, 0xc6}, {&(0x7f0000000c40)=""/11, 0xb}, {&(0x7f0000000c80)=""/131, 0x83}, {&(0x7f0000000d40)=""/170, 0xaa}], 0x5, &(0x7f0000000e80)=""/60, 0x3c}, 0x100) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000001c0)=r10, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r12, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e8a163ce2ada587066e3d639dc2750d0f49e8490418d7f4d79d3fbd0f80b48badf997", @ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) openat$cgroup_freezer_state(r5, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 20.349481834s ago: executing program 2 (id=5712): socket$kcm(0x2, 0x3, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0xcfa, 0x7, 0x10000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002000000000000", @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) r1 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 19.950680273s ago: executing program 2 (id=5714): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffaf0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1a}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='K'], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60e01, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230033) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19.641408161s ago: executing program 0 (id=5716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xe, &(0x7f0000000040), 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0xe, &(0x7f0000000040), 0x3b) (async) 19.523986623s ago: executing program 2 (id=5717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = socket$kcm(0x28, 0x5, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.399078806s ago: executing program 0 (id=5718): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0xfdc0, 0x0, 0x3, 0xff7ff038}, {0x2, 0x0, 0x0, 0x8}]}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, &(0x7f0000000080)) 19.349348678s ago: executing program 2 (id=5719): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe40b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x6}, 0x8000, 0x9, 0x43a1bd76, 0x2, 0xa9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x4, 0x9, 0x23, 0x0, 0x8, 0x10100, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x800, 0x1, 0x1, 0x8, 0x5, 0x5, 0x1, 0x0, 0x23a05e3, 0x0, 0x100000000}, 0xffffffffffffffff, 0x4, r2, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 19.346796527s ago: executing program 4 (id=5720): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000a7e11e2f7c5d", 0x2e}], 0x1}, 0x40) 19.027338275s ago: executing program 0 (id=5721): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a073f0006007c09e8fc55a10a0015000600142603600e120800020081000401a8000180f2ffffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000018000000000000000c0000000c00000002000000000000000000000400000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r0, 0x24, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0]}, 0x40) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x88e0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xf7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad0000000000851000000200000085000000150000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 18.800780311s ago: executing program 1 (id=5722): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x480000000, 0xc080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa, 0xf00}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="a0", 0x0, 0x1, 0x2000000}, 0x50) syz_clone(0x8880, &(0x7f00000000c0)="e4baf76f72cb9a2eb5aed848e1d44acd30120e69758e94f1a5d7a07958af87c88a091a2107425fc3cf023d5a3512bf711101c1e5640182f173c6a7888bd9ec0930d736cf56fd5e9d7897e1037daf252d09060150c4adf145c708a8e88fe95ba8d4957e0aaf002bec19ba1c", 0x6b, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="9910c0ab4cf3d456de8a5300fdf666124c438fc09d0ef61e8b") recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x480000000, 0xc080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa, 0xf00}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="a0", 0x0, 0x1, 0x2000000}, 0x50) (async) syz_clone(0x8880, &(0x7f00000000c0)="e4baf76f72cb9a2eb5aed848e1d44acd30120e69758e94f1a5d7a07958af87c88a091a2107425fc3cf023d5a3512bf711101c1e5640182f173c6a7888bd9ec0930d736cf56fd5e9d7897e1037daf252d09060150c4adf145c708a8e88fe95ba8d4957e0aaf002bec19ba1c", 0x6b, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="9910c0ab4cf3d456de8a5300fdf666124c438fc09d0ef61e8b") (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) (async) 18.193442255s ago: executing program 2 (id=5723): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1e3f}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0x115, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000025a, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180), &(0x7f0000000180), 0x0, 0x80ef, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r6, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x8001, 0x0, r6, 0x5, '\x00', r8, r6, 0x2, 0x2, 0x4}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r12, 0x1, 0x41, &(0x7f0000000040)=r11, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000100)="5c00000011006bcc9e09000000000000006b876c1d0000007ea608640850a9f814001ac07c3504459b4774d400020254785194b8b96766c06fdbe6d6e308f486a6d01772c6c9530bb990b4d774ba5ef071bd185e45949175cbc701b7baad3b57", 0x60}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r13 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890b, &(0x7f0000000000)) 18.192762465s ago: executing program 0 (id=5724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x16, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xf, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[r0, r0, 0x1, r0, r0, r0, r0], &(0x7f0000000300)=[{0x3, 0x5, 0x3, 0x6}, {0x1, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x6, 0xb}], 0x10, 0xffffffc0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 18.190525835s ago: executing program 4 (id=5725): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, &(0x7f0000000240)=""/45, 0x2d}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 18.089322068s ago: executing program 1 (id=5726): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x30e98c419a27f774, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb9b}, 0x94) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)}, 0x20) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000794597700000000", @ANYRES32, @ANYBLOB='L\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005002a00000000000000000000400000000000000700"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f0000000280)="a34dc7eb6ab431ffbf1bdcfa898e966f985b925f8179dcd1ceef475ab271c3ac74ad18ec06b27ba5c8cd6c83354197c1dfd301dd", &(0x7f0000000380)=""/238, 0x4}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2112, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x8, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32=r4], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x29, 0x5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0xaa0, 0x30, 0x0, 0x8, 0x3, 0x90000000, 0x81, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a82016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r0, &(0x7f0000000140), 0x0}, 0x20) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000e5ff0004000000000000000000000000000000400000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (rerun: 32) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xff, 0x1}, 0x100904, 0x81, 0x8000, 0x0, 0x0, 0x4, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="140000000200000003000000fc03000080080000", @ANYRES32, @ANYBLOB="0d00000000040000000000000008000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) 17.306010037s ago: executing program 0 (id=5727): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x4, 0x1f, 0x0, 0x0, 0x8, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8000000000000000}, 0x100c, 0x0, 0x0, 0x0, 0x7ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x48}, 0x200040c4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081a2040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029002d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1}, 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x102010, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x10001, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x85, &(0x7f0000000ac0), 0x90) 17.252124268s ago: executing program 1 (id=5728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000050000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4087, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400), 0x0, 0xb6, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x27, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a", 0xe}], 0x1}, 0x0) (async) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)="bf25f2721e84069aa779d7754ef7d8bd9103faa786a63d149ce8ca19a861", 0x1e}, {&(0x7f0000000940)="3857302293d621da268cd307c4e959bc5dd51836b0f572943dd125c0baa66d9a9e954ad0aa68455f856a82ddf1e07f0e787f78b36e819aee2a480fb3bdd92f0a7fcf12a7045a7d062ab9ff86741995a394f005d9dee17e62f9f5cdad8937178897995201a7276534c83f662ae4b1565e60505ce6dfaab57a4f9e094f368f87f1979c603407829a1f7f4a33b07dec73fa92d6a2ff175d70ba18f732ad2f43deee2c17684f88fbd94482f48e0f63ea338a3e9ef84b6d70521646218bae5b0707e402cbd8ee859a6b6feb9d740966c2363ad443896f718c33f507bbb3d4", 0xdc}, {&(0x7f0000000a40)="cd2e769873935d8e9f21720b7b61b91ef948d6596cb5791388e43f8aacee2212657c2ba1adf60855af6286af2826f781be5aa79beb74adefa81b0e8c7b3f52a7e0d54b0449dec7749277c29b3d90c3929b0b9705244ccc9d63426637a19242c1d7ee2d1bf5862eaf875b0c9c19cdd00e", 0x70}], 0x3}, 0x20004000) (async) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100) (async) r9 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r9, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) (async) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES8=r9], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18220000c4d296b3c1339bcb975175b4fd1de5ad471fbacfc672171c7fbaa7fc4d5d93a3ec93cf974c6aea98d94d3c1f2077ff0047bc128553b5ae7662ceca61a74ef9cda5b67a54db7f5baabbcf38c0bca81be9e371c999a16c4530612409eca349687ca80dc3b5aff02568914e8eb558c6b685c1fe2263cdc961", @ANYRES32=r3, @ANYBLOB="00000000040000009500000000000000850000009f000000"], &(0x7f0000000b40)='GPL\x00', 0x4, 0xc, &(0x7f0000000b80)=""/12, 0x41100, 0x10, '\x00', r4, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x4, 0x7, 0x7fffffff, 0x3}, 0x10, 0x9454, r0, 0x3, &(0x7f0000000c00)=[r5], &(0x7f0000000c40)=[{0x1, 0x2, 0x5, 0xc}, {0x5, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x9, 0x9}], 0x10, 0x1000}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0xfc, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0xfffffffd, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0xffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x10) 17.17345521s ago: executing program 4 (id=5729): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)={'a', ' *:* ', 'wm\x00'}, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000071119800000000008510eeff01000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 17.14725146s ago: executing program 2 (id=5730): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x3}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x15) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8520}, 0x92f5e}, 0x6d) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe768fa1139633415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.973676654s ago: executing program 1 (id=5731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x81ff, 0x6a80f, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r9, 0x8955, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000840)={r9}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000880)=r1, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020c0008000000b703000006000000850000002d0000009500"/96], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r11}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.877426527s ago: executing program 4 (id=5732): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000001480)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000041000009500"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg(r2, &(0x7f0000001800)={&(0x7f0000000100)=@ll={0x11, 0x2, r5, 0x1, 0x1, 0x6, @random="9caf93c61855"}, 0x80, &(0x7f0000001740)=[{&(0x7f00000001c0)="09b97cd0012873af5a82e7e5127f1d6e459b865dd01a7089e9dd2a01ca73c191ec3bbd8adb6269150a9d763f57b8537d1bc36dc89834f7658a9b59ad44d688894d6c2062e002c960fe9bcf40ac933d747ad3cf4c6b81bfd1671a09afba95745cdae8497c9be3", 0x66}, {&(0x7f0000000240)="f5f9b996be94d6e2a2743f1064d6e2980f559214df7fad660562e7f83c82dfa441f9e9231a35fba2fa9e94af9a2e1c096fd39db3a033e704b132ec30e1a64170c4cccce1ca3b42186019bcea402b20511fe5ab632ba2686b54d9f249db8cdb5bf816c274bf2108aac91fabb423f7105a094d1196e4d4c28b9c6e733e16841c1d05d42fccc131e53f", 0x88}, {&(0x7f0000000300)="464647efff41daf92e", 0x9}, {&(0x7f0000000340)="7200d5564212eddd023dc5e4e9fa6fc71e22b9cd5cde77b16001961d1749f1fa85718029e68e20bc28f2255dce7ffbbc9e089b2d7205ab6b334244262dca6e4af6d142f96df0e640b720a2a19d0d10f5be8a658b9755767c0c87ee8eda88c5a2cad93d2b2f006b9e140143e5d785c6f29280b7e368c4c04edab9", 0x7a}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="34e484cab61d0823fc13576db6643ac1736c600d0d8399a7cd70b005ad681d5df3ac445830923a333090f14cab8c19b45b1d89c1082a22c476b58e98c6c6012464dcae450cdd4e160c9485", 0x4b}, {&(0x7f00000015c0)="72c1f2aecb3977bb104c30a0f04e3477312904bc36511d7795cb245a77a0e513d9a0a57f33d0145d2eae1c5a9f00a8135bfdf799636dc5367874f0382e166eac23de8a8d7e8033e3ae6651c0bc819bc1648f9cbd40035054a96f7bbaac0c6c82c936b29b9e1d5e8d4d4b32b6802c0f5283e41d9456455f7222910052af8f9f2e7d8353e3e1bbd1389092d677ec1ec5a91eb78f4765e8d8ff29d0576866b646ff6d7755e64335a2f1cd2a63e0754b5333121a01694d19382e6212a878564f2bae9d", 0xc1}, {&(0x7f00000016c0)="432b88322a8e23c71f239ee75b73e5e83dae982cdd27a9114f42748d88bd312c3ae380cc768a21d2a2e039cfb88bab28eff534eae0aaea22d5164cb955537c72b71b268eb1b230bafa637d52157667c71f61175e82610c414d7d00b542f0a4f7c60e0c8ade3d9509aa75dfc3a26cdeae8b92665283374f828fc46943", 0x7c}], 0x8, &(0x7f00000017c0)=[{0x38, 0xff, 0xf, "5398045de85b642c2d5f26c486d3ab064c7edb5f6b8743da79d7a96016ccca44a3156e"}], 0x38}, 0x4004) 15.816934782s ago: executing program 4 (id=5733): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000f00)={&(0x7f0000000640)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000940)="08c96afcb898968cbfb65ada5e0665a866b5065374bae1d649e73a6c19a924431f219ecd767c5314c7abc4c2b4c0119e5f5fc1a91f560807a4938b665eee3e8c6a4b642c43c179a62d4e6b61b5245fd85291dd5c1531dc4d5758e8cee707f5c2738e3bf84893c0beb5a449933f4b7b4ad04f3dd8d4018fe1fb54965770ddc96592e213c346c7dd8544568cd35a581a393ae5a04687a065cf355c17ec84c615361da5d55c5a00a593d1d2fa0e44593fc816d755828123dc114293cac9b4d52c734d69b363ad76fd24178bf25e921d03b6e8d8fbf1f5472c4994342107996762a4", 0xe0}, {&(0x7f0000000a40)="35d529b1c839ab181f0123d255c5f7429d8dc7eb84a96f89e564ce11f7ad0651db029d8558c8eb", 0x27}, {&(0x7f0000000a80)="94e72f746d3012a5", 0x8}, {&(0x7f0000000ac0)="e1759ed101ea58464f922d11ef0c452620d8e585cbb36700c30598abb5d129390a62794054212b1735416a6369d769a6f80a0e51a0a2371522b95b4af76975f9f747df0601aa2356b77d79a3efd0d9e83ac6b78de223bc7f00b59282ce6834004dc1ead9ededce6b73d707eea9fa62a8f2fd98a506b5d8b626de792ebd76c1df104891a0cae7d205e35655d1061dc260d1849ab966cdc0f39e093faebaa075f103c086221b87e3a9561d1ecbf107f60a06e38fab", 0xb4}, {&(0x7f0000000b80)="5c2eca42cc0959c12e560a49901bddaf4bc85148c0cba288b10c80aa12117282903ee40931e79004739b3a6248a191e9f19ebdec021829a4ede358b4146f9c29401fca5d8b2c6aa7e213d1dac32f7fc57516c4d3e0d7a24ca5cd9fd8e42cac133465cd8d4a68430a", 0x68}, {&(0x7f0000000c80)="ffbac6e9a4e434988dabde4ab86bdfde470567cffb4c0b34d5a29988d0140e484f88a25c8240df8db514e28df535af51213e0d6753890bbdd1ee5ed1a622d07532d1360667dba19f8308fe217cfbab12839f9aff8b2ecb35812645b101073b7e63f694444143018b0abcef371dee2e7caa47c429c02596c0b26a03e26a19b8b95381c05b903382da0288417a5e2b964d54c66d97d1b4f994f5f3cc81", 0x9c}, {&(0x7f0000000d40)="9c3b008973ddfa3f418e8893e6de0584e3dea4e93517e9306998d0603071be0d236d2ed927a8a035144063328c23d6459548a7a1e05affc9f33f6e25f53ae781ad2269ea9c0f76a9d32e0a022a8ebf6e05306de03236ad4d11b5c92704ece0", 0x5f}, {&(0x7f0000000dc0)="714c8e50ba208c036274190c432fe3bb00de983f69dc77351a72cace61db69c3abd478c7a8535d10d83f1fe19900655d581c898bf7ae0f9f5a715342d7aa4d23232866ada21c39cfc0faa3f7c7fbb6fafd849d072be1394a39da275b865e2553d7c0c516c1703599eafdae57f91149cf0499cc5964fc5cd50225653015360d83acf2e78077a20f64a23adccba5df704735a47ddb90e9155cd0f0757aacec812742b33c03458c00", 0xa7}], 0x8}, 0x40010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000ffffffff8500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="ebeb63", 0x1080}], 0x1}, 0x14000800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x12080, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f00000008c0)=r7) 15.220463997s ago: executing program 4 (id=5734): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000a7e11e2f7c5d", 0x2e}], 0x1}, 0x40) 1.362223267s ago: executing program 33 (id=5727): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x4, 0x1f, 0x0, 0x0, 0x8, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESDEC], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8000000000000000}, 0x100c, 0x0, 0x0, 0x0, 0x7ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x48}, 0x200040c4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081a2040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029002d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1}, 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x102010, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x10001, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x85, &(0x7f0000000ac0), 0x90) 1.23133472s ago: executing program 34 (id=5731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x81ff, 0x6a80f, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r9, 0x8955, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000840)={r9}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000880)=r1, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020c0008000000b703000006000000850000002d0000009500"/96], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r11}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.093860664s ago: executing program 35 (id=5730): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x3}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x15) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8520}, 0x92f5e}, 0x6d) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe768fa1139633415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 36 (id=5734): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000a7e11e2f7c5d", 0x2e}], 0x1}, 0x40) kernel console output (not intermixed with test programs): 5] netlink: 'syz.1.4257': attribute type 21 has an invalid length. [ 935.608715][T21445] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4257'. [ 936.144715][T21460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4263'. [ 936.173634][T21459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4263'. [ 936.315057][T21467] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4265'. [ 936.469849][T21470] netlink: 'syz.3.4266': attribute type 4 has an invalid length. [ 936.491047][T21470] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4266'. [ 936.665483][T21475] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4266'. [ 936.703247][T21475] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.4266'. [ 937.704864][T21501] netlink: 'syz.3.4273': attribute type 10 has an invalid length. [ 937.961515][T21505] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4274'. [ 938.396149][T21515] netlink: 'syz.3.4278': attribute type 29 has an invalid length. [ 938.429448][T21515] netlink: 'syz.3.4278': attribute type 29 has an invalid length. [ 938.698580][T21524] netlink: 'syz.3.4281': attribute type 3 has an invalid length. [ 938.716467][T21524] netlink: 16795 bytes leftover after parsing attributes in process `syz.3.4281'. [ 939.961996][ T5788] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 940.011745][T21560] syzkaller0: entered promiscuous mode [ 940.033669][T21560] syzkaller0: entered allmulticast mode [ 940.168887][T21564] sctp: [Deprecated]: syz.1.4292 (pid 21564) Use of int in maxseg socket option. [ 940.168887][T21564] Use struct sctp_assoc_value instead [ 940.373414][T21576] __nla_validate_parse: 1 callbacks suppressed [ 940.373490][T21576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4295'. [ 940.406607][T21576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4295'. [ 940.689736][T21589] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4298'. [ 940.712894][T21589] net_ratelimit: 1017 callbacks suppressed [ 940.712916][T21589] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 940.807987][T21589] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4298'. [ 940.893772][T21592] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4298'. [ 940.951798][T21589] netlink: 'syz.3.4298': attribute type 153 has an invalid length. [ 941.013347][T21589] netlink: 'syz.3.4298': attribute type 3 has an invalid length. [ 941.065057][T21589] netlink: 125336 bytes leftover after parsing attributes in process `syz.3.4298'. [ 941.589893][T21605] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4302'. [ 941.642375][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4302'. [ 944.878290][T21609] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4303'. [ 945.066192][T21614] netlink: 'syz.2.4305': attribute type 29 has an invalid length. [ 945.097792][T21614] netlink: 'syz.2.4305': attribute type 29 has an invalid length. [ 945.118795][T21616] netlink: 'syz.2.4305': attribute type 29 has an invalid length. [ 945.157063][T21614] netlink: 'syz.2.4305': attribute type 29 has an invalid length. [ 946.760543][T21631] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4308'. [ 947.698999][T21645] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4312'. [ 947.737394][T21640] syzkaller0: entered promiscuous mode [ 947.762864][T21640] syzkaller0: entered allmulticast mode [ 952.990337][T21658] lo: entered allmulticast mode [ 953.009826][T21659] lo: entered promiscuous mode [ 953.023810][T21659] lo: left allmulticast mode [ 953.063265][T21660] C: renamed from team_slave_0 (while UP) [ 953.115291][T21660] netlink: 'syz.0.4316': attribute type 3 has an invalid length. [ 953.133596][T21660] netlink: 'syz.0.4316': attribute type 2 has an invalid length. [ 953.145373][T21660] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4316'. [ 953.156249][T21660] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 953.320310][T21672] delete_channel: no stack [ 953.331468][T21672] delete_channel: no stack [ 953.339828][T21671] netlink: 'syz.0.4320': attribute type 10 has an invalid length. [ 953.350742][T21671] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4320'. [ 953.368760][T21671] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 954.293259][T21706] netlink: 'syz.1.4332': attribute type 21 has an invalid length. [ 954.301262][T21706] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4332'. [ 954.349290][T21706] netlink: 'syz.1.4332': attribute type 4 has an invalid length. [ 955.071345][T21725] netlink: 'syz.1.4337': attribute type 10 has an invalid length. [ 955.170378][T21725] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 955.373304][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 45 (since boot) is 1035 jiffies old. [ 955.498929][T21733] netlink: 'syz.1.4339': attribute type 10 has an invalid length. [ 957.829443][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 957.845327][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 957.854826][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 957.900710][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 957.928609][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 957.946708][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 958.338293][T21756] chnl_net:caif_netlink_parms(): no params data found [ 958.498856][T21756] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.506514][T21756] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.514143][T21756] bridge_slave_0: entered allmulticast mode [ 958.522149][T21756] bridge_slave_0: entered promiscuous mode [ 958.534353][T21756] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.541860][T21756] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.549832][T21756] bridge_slave_1: entered allmulticast mode [ 958.558243][T21756] bridge_slave_1: entered promiscuous mode [ 958.603770][T21756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.620148][T21756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.640606][T21769] netlink: 'syz.1.4347': attribute type 10 has an invalid length. [ 958.650272][T21769] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4347'. [ 958.732603][T21756] team0: Port device team_slave_0 added [ 958.767365][T21756] team0: Port device team_slave_1 added [ 958.860001][T21756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.871929][T21756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.906990][T21756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.922833][T21756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.935749][T21756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.977440][T21756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.958600][T21756] hsr_slave_0: entered promiscuous mode [ 959.970315][T21756] hsr_slave_1: entered promiscuous mode [ 959.994173][ T5782] Bluetooth: hci3: command tx timeout [ 960.175059][T21789] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4353'. [ 960.228750][T21789] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4353'. [ 960.526257][T21796] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4354'. [ 960.830080][T21756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 961.535109][T21756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 961.566777][T21812] netlink: 'syz.2.4361': attribute type 39 has an invalid length. [ 961.687681][T21812] hsr_slave_1 (unregistering): left promiscuous mode [ 961.853367][T21756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 961.892312][T21756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 962.073980][ T5782] Bluetooth: hci3: command tx timeout [ 962.222560][T21756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.305132][T21756] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.349729][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.356983][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.415669][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.423240][ T8190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.595663][T21756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.856420][T21863] netlink: 'syz.0.4373': attribute type 3 has an invalid length. [ 963.903679][T21863] netlink: 'syz.0.4373': attribute type 1 has an invalid length. [ 963.926017][T21863] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4373'. [ 964.014847][T21863] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4373'. [ 964.154897][ T5782] Bluetooth: hci3: command tx timeout [ 964.927010][T21756] veth0_vlan: entered promiscuous mode [ 965.274754][T21756] veth1_vlan: entered promiscuous mode [ 965.505116][T21756] veth0_macvtap: entered promiscuous mode [ 965.561962][T21756] veth1_macvtap: entered promiscuous mode [ 965.646678][T21756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.673735][T21756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.693755][T21756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.723299][T21756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.763601][T21756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.783298][T21756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.815702][T21756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.864654][T21756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.896475][T21756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.925604][T21756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.952335][T21756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.992624][T21756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.233769][ T5782] Bluetooth: hci3: command tx timeout [ 969.147942][T21756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.173592][T21756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.212696][T21756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.228015][T21756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.351757][ T5782] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 969.547163][T21037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.575499][T21037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.673531][T21037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.681525][T21037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.055133][T21928] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4386'. [ 970.727193][T21943] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4393'. [ 970.834651][T21946] netlink: 'syz.2.4394': attribute type 33 has an invalid length. [ 970.842720][T21946] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4394'. [ 970.917601][T21946] A link change request failed with some changes committed already. Interface .3ãc¤± may have been left with an inconsistent configuration, please check. [ 972.935221][T21992] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4408'. [ 972.974805][T21992] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4408'. [ 974.535661][T22007] netlink: 'syz.1.4411': attribute type 10 has an invalid length. [ 974.571030][T22007] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 974.916830][ T5782] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 975.332322][T22035] netlink: 'syz.2.4421': attribute type 2 has an invalid length. [ 975.337699][T22029] syzkaller0: left promiscuous mode [ 975.354709][T22035] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4421'. [ 975.394941][T22029] syzkaller0: left allmulticast mode [ 975.724942][T22045] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4423'. [ 976.235409][T22048] netlink: 'syz.0.4424': attribute type 21 has an invalid length. [ 976.273747][T22048] netlink: 'syz.0.4424': attribute type 6 has an invalid length. [ 976.316909][T22048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4424'. [ 976.368196][ T5782] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 976.496544][T22052] netlink: 'syz.2.4426': attribute type 10 has an invalid length. [ 976.874173][T22059] netlink: 'syz.0.4427': attribute type 21 has an invalid length. [ 976.882119][T22059] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4427'. [ 977.026195][T22062] netlink: 'syz.0.4427': attribute type 21 has an invalid length. [ 977.063996][T22062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4427'. [ 977.142551][T22059] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4427'. [ 977.216047][T22059] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 977.373111][T22062] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4427'. [ 977.441275][T22062] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 977.500114][T22062] CPU: 0 PID: 22062 Comm: syz.0.4427 Not tainted syzkaller #0 [ 977.507686][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.517804][T22062] Call Trace: [ 977.521393][T22062] [ 977.524458][T22062] dump_stack_lvl+0x18c/0x250 [ 977.529293][T22062] ? show_regs_print_info+0x20/0x20 [ 977.534556][T22062] ? load_image+0x420/0x420 [ 977.539312][T22062] sysfs_warn_dup+0x8e/0xa0 [ 977.543963][T22062] sysfs_do_create_link_sd+0xc0/0x110 [ 977.549411][T22062] device_add_class_symlinks+0x1cf/0x240 [ 977.555464][T22062] device_add+0x4f9/0xc40 [ 977.559858][T22062] wiphy_register+0x1d99/0x2ac0 [ 977.564801][T22062] ? cfg80211_event_work+0x40/0x40 [ 977.570051][T22062] ? minstrel_ht_alloc+0x88a/0x990 [ 977.575214][T22062] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 977.581337][T22062] ieee80211_register_hw+0x2dd8/0x3b30 [ 977.586847][T22062] ? ieee80211_register_hw+0xf71/0x3b30 [ 977.592531][T22062] ? ieee80211_tasklet_handler+0x20/0x20 [ 977.598287][T22062] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 977.604245][T22062] ? __debug_object_init+0xec/0x450 [ 977.609541][T22062] ? __asan_memset+0x22/0x40 [ 977.614209][T22062] ? __hrtimer_init+0x189/0x270 [ 977.619104][T22062] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 977.625265][T22062] ? mac80211_hwsim_free+0x220/0x220 [ 977.630592][T22062] ? rcu_is_watching+0x15/0xb0 [ 977.635396][T22062] ? kstrndup+0xbd/0x140 [ 977.639787][T22062] hwsim_new_radio_nl+0xdad/0x1a70 [ 977.645024][T22062] ? __nla_validate+0x50/0x50 [ 977.649770][T22062] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 977.656145][T22062] ? __nla_parse+0x40/0x50 [ 977.660600][T22062] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 977.667118][T22062] genl_family_rcv_msg_doit+0x21a/0x310 [ 977.672718][T22062] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 977.678651][T22062] ? bpf_lsm_capable+0x9/0x10 [ 977.683461][T22062] ? security_capable+0x89/0xb0 [ 977.688453][T22062] genl_rcv_msg+0x611/0x7a0 [ 977.692997][T22062] ? genl_bind+0x360/0x360 [ 977.697542][T22062] ? perf_trace_lock+0xfc/0x3b0 [ 977.702428][T22062] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 977.708796][T22062] ? perf_trace_lock+0xfc/0x3b0 [ 977.713692][T22062] netlink_rcv_skb+0x235/0x4c0 [ 977.718488][T22062] ? genl_bind+0x360/0x360 [ 977.722940][T22062] ? netlink_ack+0x1160/0x1160 [ 977.727749][T22062] ? __lock_acquire+0x7d80/0x7d80 [ 977.732902][T22062] ? net_generic+0x1e/0x240 [ 977.737454][T22062] ? down_read+0x1ac/0x2e0 [ 977.741954][T22062] genl_rcv+0x28/0x40 [ 977.746074][T22062] netlink_unicast+0x7b1/0x930 [ 977.750889][T22062] netlink_sendmsg+0x8d0/0xbf0 [ 977.755705][T22062] ? netlink_getsockopt+0x590/0x590 [ 977.760946][T22062] ? apparmor_socket_sendmsg+0x8e/0x330 [ 977.766528][T22062] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 977.771849][T22062] ? security_socket_sendmsg+0x80/0xa0 [ 977.777440][T22062] ? netlink_getsockopt+0x590/0x590 [ 977.782784][T22062] ____sys_sendmsg+0x61b/0x980 [ 977.787629][T22062] ? __asan_memset+0x22/0x40 [ 977.792294][T22062] ? __sys_sendmsg_sock+0x30/0x30 [ 977.797460][T22062] ? __import_iovec+0x5f2/0x850 [ 977.802419][T22062] ? import_iovec+0x73/0xa0 [ 977.807010][T22062] ___sys_sendmsg+0x2a6/0x360 [ 977.811895][T22062] ? __sys_sendmsg+0x2b0/0x2b0 [ 977.817141][T22062] __se_sys_sendmsg+0x1d0/0x2c0 [ 977.822167][T22062] ? __x64_sys_sendmsg+0x80/0x80 [ 977.827268][T22062] ? lockdep_hardirqs_on+0x98/0x150 [ 977.832544][T22062] do_syscall_64+0x55/0xb0 [ 977.837038][T22062] ? clear_bhb_loop+0x40/0x90 [ 977.841766][T22062] ? clear_bhb_loop+0x40/0x90 [ 977.846497][T22062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.852543][T22062] RIP: 0033:0x7fc7aad9e0d9 [ 977.857058][T22062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.876705][T22062] RSP: 002b:00007fc7abc72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.885430][T22062] RAX: ffffffffffffffda RBX: 00007fc7ab026090 RCX: 00007fc7aad9e0d9 [ 977.893471][T22062] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 977.901630][T22062] RBP: 00007fc7aae35024 R08: 0000000000000000 R09: 0000000000000000 [ 977.909672][T22062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.917717][T22062] R13: 00007fc7ab026128 R14: 00007fc7ab026090 R15: 00007ffeae63c878 [ 977.925855][T22062] [ 978.076947][T22073] netlink: 'syz.1.4432': attribute type 29 has an invalid length. [ 978.147736][T22073] netlink: 'syz.1.4432': attribute type 29 has an invalid length. [ 978.556642][T22084] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4435'. [ 978.603436][T22084] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 978.919095][T22095] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4436'. [ 978.951190][T22101] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4437'. [ 980.421081][T22124] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 980.453469][T22124] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 980.482412][T22126] __nla_validate_parse: 2 callbacks suppressed [ 980.482436][T22126] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.4444'. [ 980.653799][T22129] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4445'. [ 981.546616][T22129] team0: Port device team_slave_0 removed [ 981.563965][T22129] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 981.843619][T22136] syz.4.4447 (22136) used obsolete PPPIOCDETACH ioctl [ 982.575829][T22147] netlink: 'syz.2.4451': attribute type 1 has an invalid length. [ 982.603358][T22147] netlink: 'syz.2.4451': attribute type 6 has an invalid length. [ 982.632098][T22147] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.4451'. [ 982.635801][T22149] macsec0: entered promiscuous mode [ 982.675450][T22149] macsec0: entered allmulticast mode [ 982.693338][T22149] veth1_macvtap: entered allmulticast mode [ 984.173071][T22179] netlink: 'syz.2.4460': attribute type 29 has an invalid length. [ 984.196266][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'. [ 984.225612][T22179] netlink: 'syz.2.4460': attribute type 29 has an invalid length. [ 984.263626][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'. [ 984.361227][T22178] netlink: 'syz.2.4460': attribute type 11 has an invalid length. [ 984.371444][T22178] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.4460'. [ 984.400823][T22181] netlink: 'syz.0.4461': attribute type 10 has an invalid length. [ 985.324658][T22211] bridge0: port 1(ip6gretap0) entered blocking state [ 985.331622][T22211] bridge0: port 1(ip6gretap0) entered disabled state [ 985.402027][T22211] ip6gretap0: entered allmulticast mode [ 985.422227][T22211] ip6gretap0: entered promiscuous mode [ 985.460429][T22211] bridge0: port 1(ip6gretap0) entered blocking state [ 985.467400][T22211] bridge0: port 1(ip6gretap0) entered forwarding state [ 985.487267][T22217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4471'. [ 985.511918][T22217] netlink: 'syz.4.4471': attribute type 10 has an invalid length. [ 985.701413][T22217] team0: Port device wlan1 added [ 985.732316][T22212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.852856][T22221] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4466'. [ 985.914180][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 45 (since boot) is 4089 jiffies old. [ 986.286609][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 986.758204][T22242] syzkaller0: entered promiscuous mode [ 986.796058][T22242] syzkaller0: entered allmulticast mode [ 986.824230][T22246] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.4478'. [ 986.846582][T22249] netlink: 'syz.0.4478': attribute type 7 has an invalid length. [ 986.873396][T22249] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.4478'. [ 990.593455][T22274] netlink: 'syz.4.4485': attribute type 2 has an invalid length. [ 990.601363][T22274] netlink: 'syz.4.4485': attribute type 8 has an invalid length. [ 990.623601][T22274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4485'. [ 992.017035][T21032] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.205096][T21032] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.360506][T21032] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.383551][T22325] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.4500'. [ 993.681755][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.688530][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.821326][T21032] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.894373][T22333] netlink: 'syz.1.4499': attribute type 10 has an invalid length. [ 995.936010][T22357] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4508'. [ 996.336343][T22357] team0: Port device team_slave_0 removed [ 996.706047][T22369] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.4510'. [ 998.615445][T22410] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4519'. [ 1000.805187][T22459] netlink: 'syz.1.4525': attribute type 4 has an invalid length. [ 1000.838098][T22459] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1001.010826][T22458] netlink: 'syz.0.4528': attribute type 29 has an invalid length. [ 1001.039054][T22458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1001.077090][T22460] netlink: 'syz.0.4528': attribute type 15 has an invalid length. [ 1001.215402][T22460] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1001.301395][T22458] netlink: 'syz.0.4528': attribute type 29 has an invalid length. [ 1001.381736][T22458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1003.641143][T22499] netlink: 'syz.0.4535': attribute type 10 has an invalid length. [ 1003.887349][T21032] hsr_slave_0: left promiscuous mode [ 1003.900962][T21032] hsr_slave_1: left promiscuous mode [ 1004.254556][T22518] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1004.294565][T22518] netlink: zone id is out of range [ 1004.300098][T22518] netlink: zone id is out of range [ 1004.323371][T22518] netlink: zone id is out of range [ 1004.328670][T22518] netlink: zone id is out of range [ 1004.344458][T22518] netlink: zone id is out of range [ 1004.361426][T22518] netlink: zone id is out of range [ 1004.384594][T22518] netlink: zone id is out of range [ 1004.389795][T22518] netlink: zone id is out of range [ 1004.403322][T22518] netlink: zone id is out of range [ 1004.409105][T22518] netlink: zone id is out of range [ 1004.905326][T21032] team0 (unregistering): Port device team_slave_1 removed [ 1004.967759][T21032] team0 (unregistering): Port device team_slave_0 removed [ 1005.027712][T21032] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.083085][T21032] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.139990][T21032] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1005.426957][T21032] .` (unregistering): Released all slaves [ 1005.491913][T22516] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1005.521324][T22523] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1006.487030][T22548] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1007.509604][T22569] netlink: 'syz.1.4546': attribute type 10 has an invalid length. [ 1008.348778][T22582] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.4548'. [ 1008.871754][T22600] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4553'. [ 1008.927500][T22600] hsr_slave_0: left promiscuous mode [ 1009.220486][T22600] hsr_slave_1: left promiscuous mode [ 1010.031690][T22624] netlink: 'syz.0.4558': attribute type 10 has an invalid length. [ 1010.495470][T22639] netlink: 'syz.0.4563': attribute type 39 has an invalid length. [ 1011.570589][T22673] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4569'. [ 1012.301437][T22681] netlink: 'syz.4.4571': attribute type 10 has an invalid length. [ 1012.314929][T22681] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1014.895067][T22712] C: renamed from team_slave_0 [ 1014.925141][T22712] netlink: 'syz.2.4574': attribute type 2 has an invalid length. [ 1014.933044][T22712] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1014.950085][T22712] net_ratelimit: 251 callbacks suppressed [ 1014.950103][T22712] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1014.987922][T22718] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1015.002097][T22718] netlink: 'syz.2.4574': attribute type 2 has an invalid length. [ 1015.865153][T22744] netlink: 'syz.0.4583': attribute type 10 has an invalid length. [ 1016.328986][T22763] netlink: 'syz.1.4587': attribute type 3 has an invalid length. [ 1016.412264][T22763] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1017.083582][T22779] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4590'. [ 1017.165961][T22779] hsr_slave_0: left promiscuous mode [ 1017.248192][T22779] hsr_slave_1: left promiscuous mode [ 1017.973050][T22795] netlink: 'syz.4.4594': attribute type 10 has an invalid length. [ 1017.992397][T22797] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4595'. [ 1018.734398][T22822] netlink: 'syz.2.4602': attribute type 4 has an invalid length. [ 1018.755349][T22822] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4602'. [ 1018.969988][T22826] netlink: 'syz.0.4604': attribute type 10 has an invalid length. [ 1019.016893][T22828] netlink: 'syz.1.4603': attribute type 9 has an invalid length. [ 1019.039679][T22828] netlink: 201644 bytes leftover after parsing attributes in process `syz.1.4603'. [ 1019.067296][T22826] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1020.110072][T22841] netlink: 'syz.4.4607': attribute type 10 has an invalid length. [ 1020.832332][T22858] netlink: 'syz.0.4611': attribute type 10 has an invalid length. [ 1020.875651][T22858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1020.921870][T22858] netlink: 'syz.0.4611': attribute type 10 has an invalid length. [ 1020.963542][T22858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1021.716298][T22888] netlink: 'syz.0.4617': attribute type 3 has an invalid length. [ 1021.765593][T22888] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1022.274948][T22908] netlink: 'syz.1.4621': attribute type 10 has an invalid length. [ 1022.336953][T22905] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.4620'. [ 1022.486470][T22919] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4622'. [ 1023.046381][T22934] netlink: 'syz.0.4627': attribute type 22 has an invalid length. [ 1023.090572][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4627'. [ 1024.153558][T22952] netlink: 'syz.1.4633': attribute type 10 has an invalid length. [ 1025.661968][T22996] netlink: 'syz.1.4642': attribute type 10 has an invalid length. [ 1025.755337][T23005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4644'. [ 1026.598165][T23010] ÿÿÿÿ: port 1(macsec0) entered blocking state [ 1026.609371][T23010] ÿÿÿÿ: port 1(macsec0) entered disabled state [ 1026.619884][T23010] macsec0: entered promiscuous mode [ 1026.683617][T23020] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1026.838703][T23023] netlink: 'syz.4.4646': attribute type 2 has an invalid length. [ 1026.938458][T23022] syzkaller0: entered promiscuous mode [ 1026.948293][T23022] syzkaller0: entered allmulticast mode [ 1026.989490][T23035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4651'. [ 1030.208570][T23052] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4654'. [ 1030.297109][T23065] netlink: 'syz.0.4655': attribute type 4 has an invalid length. [ 1030.323480][T23065] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4655'. [ 1030.416798][T23069] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4657'. [ 1030.575033][T23073] netlink: 'syz.1.4656': attribute type 10 has an invalid length. [ 1032.141893][T23101] netlink: 'syz.4.4662': attribute type 9 has an invalid length. [ 1032.166191][T23101] netlink: 201644 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1033.115160][T23122] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.4665'. [ 1034.147123][T23146] netlink: 'syz.0.4669': attribute type 10 has an invalid length. [ 1035.776349][T23175] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4673'. [ 1035.940044][T23183] netlink: 'syz.1.4675': attribute type 2 has an invalid length. [ 1036.065937][T23190] netlink: 'syz.2.4674': attribute type 10 has an invalid length. [ 1036.115785][T23190] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1037.743743][T23222] netlink: 'syz.4.4682': attribute type 10 has an invalid length. [ 1037.961913][T23230] netlink: 'syz.0.4686': attribute type 1 has an invalid length. [ 1037.984459][T23230] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4686'. [ 1038.038045][T23232] netlink: 'syz.0.4686': attribute type 1 has an invalid length. [ 1038.085606][T23232] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4686'. [ 1039.014819][T23250] syzkaller0: entered promiscuous mode [ 1039.020589][T23250] syzkaller0: entered allmulticast mode [ 1039.138973][T23254] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4690'. [ 1040.864707][T23255] netlink: 'syz.4.4688': attribute type 10 has an invalid length. [ 1041.597403][T23278] netlink: 'syz.2.4697': attribute type 10 has an invalid length. [ 1042.351062][T23293] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.4703'. [ 1042.389674][T23296] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1042.607108][T23306] netlink: 'syz.0.4706': attribute type 3 has an invalid length. [ 1042.639681][T23306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4706'. [ 1042.803060][T23314] netlink: 'syz.0.4709': attribute type 10 has an invalid length. [ 1043.289629][T23330] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1044.601022][T23331] netlink: 'syz.0.4711': attribute type 10 has an invalid length. [ 1044.998080][T23345] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4715'. [ 1047.321321][T23383] netlink: 'syz.0.4725': attribute type 10 has an invalid length. [ 1047.768777][T23408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1047.787696][T23408] .`: (slave 30): Releasing backup interface [ 1047.809375][T23408] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 1047.829545][T23410] netlink: 'syz.4.4732': attribute type 3 has an invalid length. [ 1047.841311][T23410] netlink: 'syz.4.4732': attribute type 7 has an invalid length. [ 1047.860737][T23410] netlink: 197792 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1047.931559][T23414] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4734'. [ 1047.941584][T23414] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1047.986645][T23414] netlink: 'syz.0.4734': attribute type 1 has an invalid length. [ 1047.999132][T23414] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4734'. [ 1048.207408][T23420] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4737'. [ 1048.271616][T23426] netlink: 'syz.0.4738': attribute type 9 has an invalid length. [ 1048.281597][T23426] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4738'. [ 1048.524871][T23434] netlink: 'syz.1.4739': attribute type 10 has an invalid length. [ 1049.053786][T23443] netlink: 'syz.4.4743': attribute type 10 has an invalid length. [ 1049.779003][T23443] team0: Device wg1 is of different type [ 1051.335406][T23471] netlink: 'syz.0.4751': attribute type 30 has an invalid length. [ 1051.752192][T23474] netlink: 'syz.1.4752': attribute type 29 has an invalid length. [ 1051.794006][T23477] netlink: 'syz.1.4752': attribute type 29 has an invalid length. [ 1051.814654][T23478] netlink: 'syz.1.4752': attribute type 29 has an invalid length. [ 1054.206509][T23498] validate_nla: 2 callbacks suppressed [ 1054.206528][T23498] netlink: 'syz.2.4758': attribute type 30 has an invalid length. [ 1054.445931][T23510] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.4761'. [ 1054.489418][T23515] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4761'. [ 1054.983509][T23526] netlink: 'syz.1.4765': attribute type 10 has an invalid length. [ 1055.164703][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.173709][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.825132][T23542] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1057.220406][T23553] netlink: 'syz.1.4772': attribute type 2 has an invalid length. [ 1057.238887][T23553] netlink: 'syz.1.4772': attribute type 1 has an invalid length. [ 1057.255754][T23553] netlink: 198036 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1060.079252][T23545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1061.186424][T23569] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1061.201141][T23570] netlink: 'syz.1.4776': attribute type 10 has an invalid length. [ 1061.213488][T23565] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1061.513863][T23585] netlink: 'syz.0.4787': attribute type 1 has an invalid length. [ 1061.521716][T23585] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4787'. [ 1061.558061][T23585] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4787'. [ 1062.547148][T23615] netlink: 'syz.4.4788': attribute type 10 has an invalid length. [ 1064.097363][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 20 [ 1064.259019][T23661] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1064.561067][T23661] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1064.585685][T23666] netlink: 'syz.0.4801': attribute type 10 has an invalid length. [ 1064.799676][T23677] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4805'. [ 1064.812286][T23677] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 1064.848383][T23677] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4805'. [ 1065.058360][T23685] netlink: 'syz.0.4807': attribute type 10 has an invalid length. [ 1065.072232][T23685] netlink: 'syz.0.4807': attribute type 4 has an invalid length. [ 1065.081764][T23685] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4807'. [ 1065.174754][T23685] team0: Device bond0 failed to change mtu [ 1065.921764][T23720] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1065.953581][T23720] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1066.265537][T23726] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4821'. [ 1066.552451][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1066.573897][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1066.582117][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1066.595716][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1066.604021][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1066.611517][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1066.683419][T23736] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4823'. [ 1067.129482][T14955] bond0: (slave syz_tun): Releasing backup interface [ 1067.148224][T14955] syz_tun (unregistering): left allmulticast mode [ 1067.170476][T23748] netlink: 'syz.2.4826': attribute type 21 has an invalid length. [ 1067.470048][T21030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.514773][T23732] chnl_net:caif_netlink_parms(): no params data found [ 1067.606213][T21030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.805185][T21030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.297475][T21030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.646514][ T5782] Bluetooth: hci4: command tx timeout [ 1068.770053][T23732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.783306][T23732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.794219][T23732] bridge_slave_0: entered allmulticast mode [ 1068.812099][T23732] bridge_slave_0: entered promiscuous mode [ 1068.875635][T23732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.910390][T23732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.923384][T23732] bridge_slave_1: entered allmulticast mode [ 1068.941347][T23732] bridge_slave_1: entered promiscuous mode [ 1068.992251][T23779] delete_channel: no stack [ 1069.188071][T23732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.255506][T23732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.357699][T23786] netlink: 'syz.2.4833': attribute type 10 has an invalid length. [ 1069.552124][T23732] team0: Port device team_slave_0 added [ 1069.590680][T23732] team0: Port device team_slave_1 added [ 1070.442077][T23732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.463170][T23732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.511847][T23732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.544629][T23732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.551850][T23732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.593183][T23732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.724682][ T5782] Bluetooth: hci4: command tx timeout [ 1071.020133][T23732] hsr_slave_0: entered promiscuous mode [ 1071.110574][T23732] hsr_slave_1: entered promiscuous mode [ 1071.192059][T21030] bridge0: port 1(ip6gretap0) entered disabled state [ 1071.451220][T21030] ip6gretap0 (unregistering): left allmulticast mode [ 1071.475598][T21030] ip6gretap0 (unregistering): left promiscuous mode [ 1071.482397][T21030] bridge0: port 1(ip6gretap0) entered disabled state [ 1072.798730][ T5782] Bluetooth: hci4: command tx timeout [ 1073.536437][T23846] netlink: 'syz.4.4843': attribute type 10 has an invalid length. [ 1074.554020][T23879] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1074.873549][ T5782] Bluetooth: hci4: command tx timeout [ 1075.274644][T23895] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4854'. [ 1075.464520][T23889] netlink: 'syz.1.4852': attribute type 10 has an invalid length. [ 1075.481702][T23895] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.4854'. [ 1075.514403][T23895] tipc: Started in network mode [ 1075.520099][T23895] tipc: Node identity b, cluster identity 57 [ 1075.557545][T23895] tipc: Node number set to 11 [ 1075.768812][T23732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1075.863367][T23909] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1075.874295][T23907] netlink: 'syz.4.4857': attribute type 46 has an invalid length. [ 1075.890083][T23732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1075.911649][T23732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1075.950018][T23908] syzkaller0: entered promiscuous mode [ 1075.963554][T23908] syzkaller0: entered allmulticast mode [ 1076.043685][T21030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.051208][T21030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.090131][T21030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.099353][T21030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.124204][T21030] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1076.140084][T21030] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1076.150935][T21030] bridge0: port 2(team0) entered disabled state [ 1076.194417][T21030] veth1_macvtap: left promiscuous mode [ 1076.202901][T21030] veth0_vlan: left promiscuous mode [ 1077.637334][T21030] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1077.646364][T21030] macvlan0 (unregistering): left allmulticast mode [ 1077.991826][T21030] team_slave_1 (unregistering): left promiscuous mode [ 1077.999366][T21030] team_slave_1 (unregistering): left allmulticast mode [ 1078.011126][T21030] team0 (unregistering): Port device team_slave_1 removed [ 1078.065940][T21030] C (unregistering): left promiscuous mode [ 1078.071857][T21030] C (unregistering): left allmulticast mode [ 1078.081661][T21030] team0 (unregistering): Port device C removed [ 1078.138306][T21030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.147572][T21030] bond_slave_1 (unregistering): left promiscuous mode [ 1078.154906][T21030] bond_slave_1 (unregistering): left allmulticast mode [ 1078.256370][T21030] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1078.268969][T21030] bridge_slave_1 (unregistering): left allmulticast mode [ 1078.526972][T21030] bond0 (unregistering): left promiscuous mode [ 1078.538195][T21030] bond0 (unregistering): left allmulticast mode [ 1078.548132][T21030] team0 (unregistering): Port device bond0 removed [ 1078.587379][T21030] bond0 (unregistering): Released all slaves [ 1078.710263][T23732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1078.770298][T23920] ªªªªª»: renamed from veth1_vlan (while UP) [ 1078.781845][T23924] netlink: 'syz.2.4863': attribute type 10 has an invalid length. [ 1079.033575][T23929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1079.066271][T23931] netlink: 'syz.1.4866': attribute type 3 has an invalid length. [ 1079.097346][T23931] netlink: 'syz.1.4866': attribute type 5 has an invalid length. [ 1079.225059][T23732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.305777][T23732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.477986][T21041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.485250][T21041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.561534][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.568864][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.044794][T23970] netlink: 'syz.1.4872': attribute type 10 has an invalid length. [ 1080.498722][T23732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.627425][T23732] veth0_vlan: entered promiscuous mode [ 1080.691257][T23732] veth1_vlan: entered promiscuous mode [ 1080.857154][T23732] veth0_macvtap: entered promiscuous mode [ 1080.893382][T23732] veth1_macvtap: entered promiscuous mode [ 1080.961263][T23732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.026457][T23732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.037108][T23732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.053374][T23732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.063922][T23732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.079101][T23732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.105046][T23732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.137746][T23732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.168029][T23732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.189875][T23732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.208817][T23732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.222495][T23732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.238954][T23732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.251981][T23732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.263258][T23732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.272280][T23732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.317984][T23998] netlink: 'syz.2.4876': attribute type 10 has an invalid length. [ 1082.664532][ T8181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.672446][ T8181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.791554][T21061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.800582][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 1082.903595][T21061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.275013][T24047] syz.4.4883[24047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.275207][T24047] syz.4.4883[24047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.029472][T24058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4884'. [ 1085.052653][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1085.062339][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1085.083572][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1085.105040][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1085.117492][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1085.125654][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1085.278009][T24087] netlink: 'syz.4.4892': attribute type 10 has an invalid length. [ 1085.517727][T24082] chnl_net:caif_netlink_parms(): no params data found [ 1085.697536][T24082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.709243][T24082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.719208][T24082] bridge_slave_0: entered allmulticast mode [ 1085.731600][T24082] bridge_slave_0: entered promiscuous mode [ 1085.744752][T24082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.752383][T24082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.768123][T24082] bridge_slave_1: entered allmulticast mode [ 1085.781796][T24082] bridge_slave_1: entered promiscuous mode [ 1085.861038][T24082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.894437][T24082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.170572][T24082] team0: Port device team_slave_0 added [ 1086.214981][T24082] team0: Port device team_slave_1 added [ 1086.281784][T24082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.300581][T24082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.332822][T24082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.397583][T24082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.417513][T24082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.513548][T24082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.686994][T21061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.822203][T21061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.889282][T24082] hsr_slave_0: entered promiscuous mode [ 1086.906549][T24082] hsr_slave_1: entered promiscuous mode [ 1086.913828][T24082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.931956][T24082] Cannot create hsr debugfs directory [ 1086.990654][T21061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.021908][T24122] C: renamed from team_slave_0 [ 1087.040392][T24122] netlink: 'syz.4.4900': attribute type 3 has an invalid length. [ 1087.063399][T24122] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4900'. [ 1087.147161][T21061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.193498][ T5782] Bluetooth: hci0: command tx timeout [ 1087.324465][T24133] netlink: 'syz.4.4902': attribute type 10 has an invalid length. [ 1087.419727][T24136] netlink: 'syz.1.4904': attribute type 10 has an invalid length. [ 1087.698342][T24140] netlink: 'syz.0.4905': attribute type 3 has an invalid length. [ 1087.711310][T24140] netlink: 'syz.0.4905': attribute type 5 has an invalid length. [ 1087.726050][T24140] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.4905'. [ 1089.273230][ T5782] Bluetooth: hci0: command tx timeout [ 1089.309377][T24160] sctp: [Deprecated]: syz.4.4910 (pid 24160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1089.309377][T24160] Use struct sctp_sack_info instead [ 1090.477801][T24188] netlink: 'syz.4.4913': attribute type 1 has an invalid length. [ 1090.513288][T24188] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.4913'. [ 1091.040743][T24082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1091.097696][T24082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1091.233663][T24082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1091.303248][T24082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1091.373277][ T5782] Bluetooth: hci0: command tx timeout [ 1092.382606][T24205] netlink: 'syz.0.4915': attribute type 10 has an invalid length. [ 1092.426182][T24205] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1093.382048][T24082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.433471][ T5782] Bluetooth: hci0: command tx timeout [ 1093.493761][T24082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.664224][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.671637][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.719839][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.727120][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.817740][T21061] macsec0: left promiscuous mode [ 1093.823011][T21061] ÿÿÿÿ: port 1(macsec0) entered disabled state [ 1094.093337][T21061] hsr_slave_0: left promiscuous mode [ 1094.100482][T21061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.108315][T21061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.122914][T21061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.131346][T21061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.144010][T21061] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1094.151243][T21061] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1094.180132][T21061] veth0_macvtap: left promiscuous mode [ 1094.187281][T21061] veth1_vlan: left promiscuous mode [ 1094.192999][T21061] veth0_vlan: left promiscuous mode [ 1094.461653][T21061] .` (unregistering): (slave geneve0): Releasing backup interface [ 1095.061352][T21061] team0 (unregistering): Port device team_slave_1 removed [ 1095.167567][T21061] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.289006][T21061] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1095.544718][T21061] team0 (unregistering): Port device batadv0 removed [ 1095.618368][T21061] team0 (unregistering): Port device dummy0 removed [ 1095.687252][T21061] .` (unregistering): Released all slaves [ 1096.005822][T24252] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1098.531710][T24260] netlink: 'syz.1.4927': attribute type 10 has an invalid length. [ 1098.540350][T24260] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4927'. [ 1098.820161][T24082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1098.968777][T24277] IPv6: pim6reg1: Disabled Multicast RS [ 1099.547973][T24082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.831083][T24082] veth0_vlan: entered promiscuous mode [ 1099.858093][T24082] veth1_vlan: entered promiscuous mode [ 1099.935041][T24082] veth0_macvtap: entered promiscuous mode [ 1099.964319][T24082] veth1_macvtap: entered promiscuous mode [ 1100.021620][T24082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.058130][T24082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.086909][T24082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.118408][T24082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.151737][T24082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.179736][T24082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.211613][T24082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.245120][T24082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.278925][T24082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.296109][T24082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.309188][T24082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.333438][T24082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.358801][T24082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.371576][T24082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.392768][T24082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.410430][T24082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.787036][T21028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.806414][T21028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.905003][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.924523][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.003679][T24316] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4941'. [ 1101.073478][T24316] netlink: 'syz.0.4941': attribute type 2 has an invalid length. [ 1101.105506][T24317] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4942'. [ 1101.378271][T24328] netlink: 'syz.2.4944': attribute type 3 has an invalid length. [ 1101.433733][T24328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1101.464169][T24333] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.4945'. [ 1102.282056][T24339] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1102.333621][T24341] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1102.484186][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1102.496866][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1102.509049][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1102.518660][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1102.528694][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1102.540447][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1103.327747][T24342] chnl_net:caif_netlink_parms(): no params data found [ 1103.912992][T21061] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.068890][T21061] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.163424][T24342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.170797][T24342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.203388][T24342] bridge_slave_0: entered allmulticast mode [ 1104.225552][T24342] bridge_slave_0: entered promiscuous mode [ 1104.256379][T24342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.283855][T24342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.291412][T24342] bridge_slave_1: entered allmulticast mode [ 1104.314933][T24342] bridge_slave_1: entered promiscuous mode [ 1104.435777][T21061] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.585662][T21061] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.619317][T24342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.634279][ T5782] Bluetooth: hci1: command tx timeout [ 1104.666368][T24389] netlink: 'syz.2.4959': attribute type 21 has an invalid length. [ 1104.685688][T24342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.856945][T24342] team0: Port device team_slave_0 added [ 1104.904468][T24342] team0: Port device team_slave_1 added [ 1104.988917][T24342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.010704][T24342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.039154][T24342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.082889][T24342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.095957][T24342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.132251][T24342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.186130][T21061] tipc: Left network mode [ 1105.227181][T24342] hsr_slave_0: entered promiscuous mode [ 1105.244984][T24342] hsr_slave_1: entered promiscuous mode [ 1105.262487][T24342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.282837][T24342] Cannot create hsr debugfs directory [ 1105.415827][T24396] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1105.426481][T24396] netlink: zone id is out of range [ 1106.713322][ T5782] Bluetooth: hci1: command tx timeout [ 1107.854507][T24400] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 1107.888737][T24400] team0: Device hsr_slave_0 failed to register rx_handler [ 1107.942955][T24412] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1107.963500][T24412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.682854][T24419] syzkaller0: entered promiscuous mode [ 1108.707572][T24419] syzkaller0: entered allmulticast mode [ 1108.793654][ T5782] Bluetooth: hci1: command tx timeout [ 1109.422118][T24438] syzkaller0: left promiscuous mode [ 1109.454022][T24438] syzkaller0: left allmulticast mode [ 1109.532340][T24429] @: port 1(gretap0) entered blocking state [ 1109.551453][T24429] @: port 1(gretap0) entered disabled state [ 1109.564034][T24429] gretap0: entered allmulticast mode [ 1109.583346][T24429] gretap0: entered promiscuous mode [ 1110.873634][ T5782] Bluetooth: hci1: command tx timeout [ 1112.831235][T24455] netlink: 'syz.0.4971': attribute type 17 has an invalid length. [ 1112.858735][T24455] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4971'. [ 1112.873084][T24455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.899061][T24456] netlink: 'syz.0.4971': attribute type 10 has an invalid length. [ 1112.907352][T24456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4971'. [ 1112.916947][T24456] dummy0: entered promiscuous mode [ 1112.922119][T24456] dummy0: entered allmulticast mode [ 1112.928676][T24456] bridge0: port 3(dummy0) entered blocking state [ 1112.935905][T24456] bridge0: port 3(dummy0) entered disabled state [ 1112.945319][T24456] bridge0: port 3(dummy0) entered blocking state [ 1112.951846][T24456] bridge0: port 3(dummy0) entered forwarding state [ 1113.294729][T24462] mac80211_hwsim hwsim64 .3ãc¤±: renamed from wlan1 [ 1113.515908][T24476] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1114.961135][T24342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1115.007634][T24342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1115.055517][T24342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1115.067444][T24502] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4980'. [ 1115.117124][T24342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1115.392414][T24506] syzkaller0: entered promiscuous mode [ 1115.415675][T24506] syzkaller0: entered allmulticast mode [ 1116.568197][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.575307][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.885405][T21061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.895135][T24525] netlink: 'syz.2.4987': attribute type 4 has an invalid length. [ 1118.903063][T24525] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1118.915551][T21061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.951266][T21061] veth0_vlan: left promiscuous mode [ 1119.416072][T21061] team0 (unregistering): Port device geneve1 removed [ 1121.365683][T21061] team0 (unregistering): Port device team_slave_1 removed [ 1122.608624][T24342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.706675][T24342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.757947][T21028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.765604][T21028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.800506][T21028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.807863][T21028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.531835][T24587] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4999'. [ 1123.569835][T24342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.788842][T24342] veth0_vlan: entered promiscuous mode [ 1123.832531][T24342] veth1_vlan: entered promiscuous mode [ 1124.041398][T24342] veth0_macvtap: entered promiscuous mode [ 1124.068530][T24342] veth1_macvtap: entered promiscuous mode [ 1124.124834][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.144599][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.166401][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.190089][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.212083][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.245499][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.285434][T24342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.233327][T13844] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1129.588588][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.613195][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.630936][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.643001][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.657143][T24342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.683165][T24342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.721281][T24342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.782585][T24342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.815756][T24342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.829661][T24342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.839110][T24342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.982287][T24621] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1130.172069][T21028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.232512][T21028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.373853][T21025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.381781][T21025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.786290][T24653] netlink: 'syz.1.4946': attribute type 10 has an invalid length. [ 1130.832734][T24653] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1131.041659][T24661] netlink: 'syz.2.5011': attribute type 8 has an invalid length. [ 1131.058380][T24661] netlink: 'syz.2.5011': attribute type 6 has an invalid length. [ 1131.069134][T24661] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.5011'. [ 1131.563048][T24668] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.5013'. [ 1132.616305][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 1133.057634][T24715] netlink: 'syz.1.5023': attribute type 33 has an invalid length. [ 1133.103244][T24715] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5023'. [ 1133.537692][T24723] netlink: 'syz.1.5025': attribute type 10 has an invalid length. [ 1134.027478][T24732] netlink: 279 bytes leftover after parsing attributes in process `syz.4.5028'. [ 1135.686115][T24744] netlink: 'syz.2.5030': attribute type 10 has an invalid length. [ 1135.870251][T24744] team0: Device hsr_slave_0 failed to register rx_handler [ 1135.922041][T24763] netlink: 'syz.1.5036': attribute type 3 has an invalid length. [ 1135.970288][T24763] netlink: 'syz.1.5036': attribute type 1 has an invalid length. [ 1136.023483][T24763] netlink: 'syz.1.5036': attribute type 1 has an invalid length. [ 1136.031482][T24763] netlink: 'syz.1.5036': attribute type 2 has an invalid length. [ 1136.072211][T24763] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1136.603940][T24775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1136.669136][T24775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1136.710272][T24773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1136.792234][T24774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1137.005943][T24782] netlink: 'syz.4.5041': attribute type 10 has an invalid length. [ 1138.734581][T24796] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5047'. [ 1138.751719][T24796] tc_dump_action: action bad kind [ 1138.924006][T24799] netlink: 'syz.0.5045': attribute type 10 has an invalid length. [ 1139.644286][T24799] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 1140.154854][T24832] netlink: 'syz.0.5054': attribute type 3 has an invalid length. [ 1140.187829][T24832] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5054'. [ 1141.311764][T24836] netlink: 'syz.4.5055': attribute type 15 has an invalid length. [ 1141.343351][T24836] netlink: 'syz.4.5055': attribute type 7 has an invalid length. [ 1141.383975][T24836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5055'. [ 1145.310010][T24849] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1145.353188][T24849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.491600][T24849] bridge_slave_0 (unregistering): left allmulticast mode [ 1145.501541][T24849] bridge_slave_0 (unregistering): left promiscuous mode [ 1145.509445][T24849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.854142][T24851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1148.910475][T24877] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.5064'. [ 1148.921233][T24876] mac80211_hwsim hwsim75 .3ãc¤±: renamed from wlan1 (while UP) [ 1149.096113][T24898] syz.1.5069[24898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.096347][T24898] syz.1.5069[24898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.124836][T24899] syz.1.5069[24899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.168945][T24899] syz.1.5069[24899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.243757][T24900] netlink: 'syz.0.5068': attribute type 28 has an invalid length. [ 1149.264326][T24900] netlink: 'syz.0.5068': attribute type 29 has an invalid length. [ 1149.272211][T24900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5068'. [ 1149.352892][T24908] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5071'. [ 1149.373429][T24908] netlink: 'syz.4.5071': attribute type 2 has an invalid length. [ 1150.350696][T24936] netlink: 'syz.1.5079': attribute type 2 has an invalid length. [ 1150.366253][T24936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5079'. [ 1150.402548][T24940] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1150.421254][T24940] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1150.451957][T24940] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1150.804672][T24948] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5083'. [ 1152.070333][T24981] netlink: 'syz.0.5093': attribute type 8 has an invalid length. [ 1152.097490][T24981] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1152.415105][T24974] delete_channel: no stack [ 1157.147491][T24999] netlink: 'syz.0.5094': attribute type 2 has an invalid length. [ 1157.155634][T24999] netlink: 'syz.0.5094': attribute type 8 has an invalid length. [ 1157.163736][T24999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5094'. [ 1157.445518][T25030] netlink: 'syz.2.5100': attribute type 10 has an invalid length. [ 1157.469320][T25030] team0: Device hsr_slave_0 failed to register rx_handler [ 1158.356067][T25060] netlink: 'syz.0.5105': attribute type 29 has an invalid length. [ 1158.430017][T25060] netlink: 'syz.0.5105': attribute type 29 has an invalid length. [ 1158.985669][T25054] syzkaller0: entered promiscuous mode [ 1158.996415][T25055] delete_channel: no stack [ 1159.008760][T25054] syzkaller0: entered allmulticast mode [ 1164.002208][T25087] lo: entered allmulticast mode [ 1164.359622][T25104] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.5119'. [ 1165.583251][T25129] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5125'. [ 1165.592650][T25129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1165.930707][T25146] sit0: entered promiscuous mode [ 1165.959852][T25146] sit0: entered allmulticast mode [ 1166.346304][T25157] tap1: tun_chr_ioctl cmd 1074025677 [ 1166.352411][T25157] tap1: linktype set to 778 [ 1168.409667][T25179] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.5139'. [ 1168.988462][T25205] netlink: 'syz.2.5145': attribute type 10 has an invalid length. [ 1169.012634][T25205] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1170.120583][T25216] syzkaller0: entered promiscuous mode [ 1170.153384][T25216] syzkaller0: entered allmulticast mode [ 1173.253880][T25257] netlink: 'syz.2.5158': attribute type 10 has an invalid length. [ 1175.468717][T25286] netlink: 'syz.0.5167': attribute type 10 has an invalid length. [ 1175.593620][ T5782] Bluetooth: hci0: command tx timeout [ 1175.669452][T25290] netlink: 'syz.2.5168': attribute type 153 has an invalid length. [ 1175.700629][T25296] delete_channel: no stack [ 1175.705548][T25290] netlink: 'syz.2.5168': attribute type 1 has an invalid length. [ 1175.731975][T25290] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.5168'. [ 1176.659811][T25310] syzkaller0: entered promiscuous mode [ 1176.691980][T25321] netlink: 'syz.1.5177': attribute type 21 has an invalid length. [ 1177.517672][T25329] netlink: 'syz.0.5178': attribute type 10 has an invalid length. [ 1177.554826][T25326] netlink: 'syz.1.5177': attribute type 10 has an invalid length. [ 1177.571310][T25326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.611925][T25326] bridge_slave_1: left allmulticast mode [ 1177.618203][T25326] bridge_slave_1: left promiscuous mode [ 1177.624524][T25326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.683224][ T5782] Bluetooth: hci0: command tx timeout [ 1178.003507][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.013303][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.760437][ T5782] Bluetooth: hci0: command tx timeout [ 1180.243525][T25338] netlink: 'syz.0.5180': attribute type 2 has an invalid length. [ 1180.251331][T25338] netlink: 'syz.0.5180': attribute type 8 has an invalid length. [ 1180.259217][T25338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5180'. [ 1180.270178][T25339] netlink: 'syz.0.5180': attribute type 11 has an invalid length. [ 1180.279442][T25341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5180'. [ 1180.293048][T25351] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5182'. [ 1181.543354][T25370] netlink: 'syz.2.5188': attribute type 10 has an invalid length. [ 1181.833292][ T5782] Bluetooth: hci0: command tx timeout [ 1183.019487][T25407] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1183.804892][T25411] netlink: 'syz.4.5200': attribute type 2 has an invalid length. [ 1183.813589][T25411] netlink: 1045 bytes leftover after parsing attributes in process `syz.4.5200'. [ 1183.949998][ T5782] Bluetooth: hci0: command tx timeout [ 1183.955486][T25416] netlink: 'syz.0.5201': attribute type 10 has an invalid length. [ 1185.921567][T25438] netlink: 'syz.4.5207': attribute type 13 has an invalid length. [ 1185.943257][T25438] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1185.977796][T25438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1185.993179][ T5782] Bluetooth: hci0: command tx timeout [ 1187.463288][T25443] IPv6: NLM_F_CREATE should be specified when creating new route [ 1187.473321][T25443] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5209'. [ 1187.743231][ T5782] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 1188.058128][T25474] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5218'. [ 1188.083508][ T5782] Bluetooth: hci0: command tx timeout [ 1188.481671][T25484] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5221'. [ 1188.515248][T25484] netlink: zone id is out of range [ 1188.520608][T25484] netlink: zone id is out of range [ 1188.537733][T25484] netlink: zone id is out of range [ 1188.553551][T25484] netlink: zone id is out of range [ 1188.558749][T25484] netlink: zone id is out of range [ 1188.577158][T25484] netlink: zone id is out of range [ 1188.582539][T25484] netlink: zone id is out of range [ 1188.608258][T25484] netlink: zone id is out of range [ 1188.614624][T25484] netlink: zone id is out of range [ 1188.622443][T25484] netlink: zone id is out of range [ 1188.720350][T25490] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5224'. [ 1188.755834][T25490] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5224'. [ 1189.423500][T25511] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5227'. [ 1190.163624][ T5788] Bluetooth: hci0: command tx timeout [ 1190.316497][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 1190.636056][T25525] netlink: 'syz.2.5231': attribute type 29 has an invalid length. [ 1190.660372][T25525] netlink: 'syz.2.5231': attribute type 29 has an invalid length. [ 1190.684491][T25534] netlink: 'syz.2.5231': attribute type 29 has an invalid length. [ 1191.081349][T25548] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5238'. [ 1191.194293][T25555] netlink: 'syz.2.5240': attribute type 39 has an invalid length. [ 1191.276873][T25557] netlink: 'syz.2.5240': attribute type 29 has an invalid length. [ 1192.348274][ T5782] Bluetooth: hci0: command tx timeout [ 1192.506672][T25555] hsr_slave_1 (unregistering): left promiscuous mode [ 1192.725824][T25557] netlink: 'syz.2.5240': attribute type 29 has an invalid length. [ 1192.999809][T25589] netlink: 'syz.2.5250': attribute type 17 has an invalid length. [ 1193.021574][T25589] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5250'. [ 1193.131626][T25595] netlink: 'syz.1.5252': attribute type 10 has an invalid length. [ 1193.297290][T25595] team0: Port device geneve1 added [ 1193.310776][T25596] syzkaller0: entered promiscuous mode [ 1193.323291][T25596] syzkaller0: entered allmulticast mode [ 1193.332747][T25601] netlink: 'syz.4.5251': attribute type 11 has an invalid length. [ 1193.600828][T25608] netlink: 'syz.0.5254': attribute type 10 has an invalid length. [ 1193.638122][T25608] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5254'. [ 1193.758013][T25611] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5256'. [ 1194.393392][ T5782] Bluetooth: hci0: command tx timeout [ 1194.750464][T25622] lo: entered allmulticast mode [ 1194.806888][T25619] lo: entered promiscuous mode [ 1194.811779][T25619] lo: left allmulticast mode [ 1195.553986][T25637] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5262'. [ 1196.482760][ T5782] Bluetooth: hci0: command tx timeout [ 1197.887421][T25672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5270'. [ 1197.896855][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'. [ 1197.908950][T25672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'. [ 1198.366551][T25686] syz.4.5273[25686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1198.366857][T25686] syz.4.5273[25686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1198.555689][ T5782] Bluetooth: hci0: command tx timeout [ 1198.575517][T25692] netlink: 'syz.2.5276': attribute type 19 has an invalid length. [ 1198.595376][T25692] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1198.662565][T25695] netlink: 'syz.0.5275': attribute type 11 has an invalid length. [ 1198.694256][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2878 [ 1198.740630][T25694] netlink: 'syz.4.5277': attribute type 13 has an invalid length. [ 1198.749688][T25694] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5277'. [ 1198.768370][T25694] syz_tun: refused to change device tx_queue_len [ 1198.781559][T25694] net_ratelimit: 18 callbacks suppressed [ 1198.781593][T25694] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1200.099113][T25724] syzkaller0: entered promiscuous mode [ 1200.105269][T25724] syzkaller0: entered allmulticast mode [ 1200.653407][ T5782] Bluetooth: hci0: command tx timeout [ 1202.719330][ T5782] Bluetooth: hci0: command tx timeout [ 1204.188237][T25754] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1204.213263][T25754] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1204.231394][T25750] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1204.250543][T25754] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1204.272029][T25750] netlink: 'syz.2.5290': attribute type 10 has an invalid length. [ 1204.289529][T25750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1204.333206][T25750] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1204.353999][T25750] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.384435][T25750] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1204.586379][T25766] syzkaller0: entered promiscuous mode [ 1204.592034][T25766] syzkaller0: entered allmulticast mode [ 1204.799991][ T5782] Bluetooth: hci0: command tx timeout [ 1206.880628][ T5782] Bluetooth: hci0: command tx timeout [ 1206.980192][T25799] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5303'. [ 1207.698105][T25801] netlink: 'syz.1.5304': attribute type 21 has an invalid length. [ 1207.709801][T25801] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5304'. [ 1207.745134][T25801] netlink: 'syz.1.5304': attribute type 5 has an invalid length. [ 1207.784036][T25801] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5304'. [ 1208.523400][T25828] netlink: 'syz.4.5313': attribute type 3 has an invalid length. [ 1208.538858][T25828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5313'. [ 1208.953298][ T5788] Bluetooth: hci0: command tx timeout [ 1209.160631][T25841] netlink: 'syz.1.5316': attribute type 10 has an invalid length. [ 1210.049021][T25853] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5321'. [ 1210.633873][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.644573][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.654347][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.664653][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.674889][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.684981][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.694999][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.705347][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.716282][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1210.727117][T25862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1211.033213][ T5788] Bluetooth: hci0: command 0x206e tx timeout [ 1212.581950][T25885] netlink: 'syz.4.5331': attribute type 10 has an invalid length. [ 1213.141316][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1214.698390][T25898] netlink: 'syz.1.5334': attribute type 10 has an invalid length. [ 1214.778844][T25898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.891977][T25898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.899530][T25898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.031942][T25898] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1215.053452][T25901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5334'. [ 1215.203735][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1216.205246][T25916] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5339'. [ 1216.788273][T25922] netlink: 208820 bytes leftover after parsing attributes in process `syz.2.5341'. [ 1216.831572][T25922] net_ratelimit: 3319 callbacks suppressed [ 1216.831593][T25922] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1216.925266][T25922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1217.060308][T25930] netlink: 'syz.1.5342': attribute type 11 has an invalid length. [ 1217.080857][T25930] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.5342'. [ 1217.140005][T25930] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1217.274408][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1217.555974][T25933] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.5344'. [ 1217.752908][T25938] netlink: 'syz.0.5343': attribute type 10 has an invalid length. [ 1218.038471][T25938] team0: Device wg1 is of different type [ 1218.227304][T25948] netlink: 'syz.4.5345': attribute type 10 has an invalid length. [ 1219.353605][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1219.396225][T25945] sit0: entered allmulticast mode [ 1219.458461][T25951] sit0: entered promiscuous mode [ 1220.447899][T25965] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5350'. [ 1220.703252][T25965] netlink: 'syz.4.5350': attribute type 6 has an invalid length. [ 1221.443954][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1223.523653][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1225.595295][ T5788] Bluetooth: hci0: command 0x206e tx timeout [ 1226.473275][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 1226.972120][T26003] netlink: 'syz.1.5358': attribute type 10 has an invalid length. [ 1227.192706][T26020] netlink: 'syz.4.5364': attribute type 3 has an invalid length. [ 1227.208104][T26021] netlink: 'syz.1.5362': attribute type 4 has an invalid length. [ 1227.219217][T26022] netlink: 'syz.4.5364': attribute type 3 has an invalid length. [ 1227.229721][T26022] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5364'. [ 1227.253562][T26020] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5364'. [ 1227.470885][T26031] netlink: 'syz.0.5366': attribute type 33 has an invalid length. [ 1227.479400][T26031] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5366'. [ 1227.674226][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1227.719458][T26041] netlink: 14191 bytes leftover after parsing attributes in process `syz.0.5368'. [ 1227.834853][T26047] netlink: 'syz.2.5370': attribute type 10 has an invalid length. [ 1228.097378][T26052] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1228.178556][T26052] netlink: 'syz.0.5371': attribute type 3 has an invalid length. [ 1228.208278][T26052] netlink: 16795 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1229.511826][T26081] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1229.558042][T26081] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1229.650844][T26081] tipc: Started in network mode [ 1229.710888][T26081] tipc: Node identity b, cluster identity 57 [ 1229.723197][T26081] tipc: Node number set to 11 [ 1229.763349][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1230.072969][T26091] syzkaller0: mtu less than device minimum [ 1231.834149][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1233.916662][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1235.184800][T26107] netlink: 'syz.2.5382': attribute type 10 has an invalid length. [ 1235.993660][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1238.073956][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1238.812358][T26163] netlink: 'syz.4.5398': attribute type 6 has an invalid length. [ 1238.940728][T26163] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5398'. [ 1239.595764][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.602406][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.154442][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1240.408528][T26186] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1240.426110][T26183] netlink: 'syz.0.5403': attribute type 1 has an invalid length. [ 1240.457994][T26186] syzkaller1: linktype set to 6 [ 1240.503765][T26183] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5403'. [ 1241.967475][T26213] IPv6: NLM_F_CREATE should be specified when creating new route [ 1241.978333][T26209] netlink: 1183 bytes leftover after parsing attributes in process `syz.1.5408'. [ 1242.047022][T26209] netlink: 'syz.1.5408': attribute type 10 has an invalid length. [ 1242.182210][T26220] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5413'. [ 1242.235454][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1242.461297][T26209] team0: Device veth1_macvtap failed to register rx_handler [ 1242.656750][T26220] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1242.694736][T26220] CPU: 1 PID: 26220 Comm: syz.0.5413 Not tainted syzkaller #0 [ 1242.702432][T26220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1242.712653][T26220] Call Trace: [ 1242.715992][T26220] [ 1242.718985][T26220] dump_stack_lvl+0x18c/0x250 [ 1242.723755][T26220] ? show_regs_print_info+0x20/0x20 [ 1242.729491][T26220] ? load_image+0x420/0x420 [ 1242.734256][T26220] sysfs_warn_dup+0x8e/0xa0 [ 1242.738830][T26220] sysfs_do_create_link_sd+0xc0/0x110 [ 1242.744362][T26220] device_add_class_symlinks+0x1cf/0x240 [ 1242.750072][T26220] device_add+0x4f9/0xc40 [ 1242.754651][T26220] wiphy_register+0x1d99/0x2ac0 [ 1242.759621][T26220] ? cfg80211_event_work+0x40/0x40 [ 1242.764981][T26220] ? minstrel_ht_alloc+0x88a/0x990 [ 1242.770169][T26220] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1242.776504][T26220] ieee80211_register_hw+0x2dd8/0x3b30 [ 1242.782240][T26220] ? ieee80211_register_hw+0xf71/0x3b30 [ 1242.787994][T26220] ? ieee80211_tasklet_handler+0x20/0x20 [ 1242.793786][T26220] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1242.799792][T26220] ? __debug_object_init+0xec/0x450 [ 1242.805156][T26220] ? __asan_memset+0x22/0x40 [ 1242.809825][T26220] ? __hrtimer_init+0x189/0x270 [ 1242.814752][T26220] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1242.820615][T26220] ? mac80211_hwsim_free+0x220/0x220 [ 1242.825994][T26220] ? rcu_is_watching+0x15/0xb0 [ 1242.830832][T26220] ? kstrndup+0xbd/0x140 [ 1242.835158][T26220] hwsim_new_radio_nl+0xdad/0x1a70 [ 1242.840439][T26220] ? __nla_validate+0x50/0x50 [ 1242.845236][T26220] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1242.851659][T26220] ? __nla_parse+0x40/0x50 [ 1242.856162][T26220] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1242.862570][T26220] genl_family_rcv_msg_doit+0x21a/0x310 [ 1242.868198][T26220] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1242.874188][T26220] ? bpf_lsm_capable+0x9/0x10 [ 1242.878945][T26220] ? security_capable+0x89/0xb0 [ 1242.883924][T26220] genl_rcv_msg+0x611/0x7a0 [ 1242.888515][T26220] ? genl_bind+0x360/0x360 [ 1242.893006][T26220] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1242.899417][T26220] ? ref_tracker_free+0x686/0x830 [ 1242.904524][T26220] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1242.909986][T26220] netlink_rcv_skb+0x235/0x4c0 [ 1242.914907][T26220] ? genl_bind+0x360/0x360 [ 1242.919396][T26220] ? netlink_ack+0x1160/0x1160 [ 1242.924244][T26220] ? __lock_acquire+0x7d80/0x7d80 [ 1242.929341][T26220] ? down_read+0x1ac/0x2e0 [ 1242.933984][T26220] genl_rcv+0x28/0x40 [ 1242.938012][T26220] netlink_unicast+0x7b1/0x930 [ 1242.942838][T26220] netlink_sendmsg+0x8d0/0xbf0 [ 1242.947677][T26220] ? netlink_getsockopt+0x590/0x590 [ 1242.952955][T26220] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1242.958589][T26220] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1242.963934][T26220] ? security_socket_sendmsg+0x80/0xa0 [ 1242.969461][T26220] ? netlink_getsockopt+0x590/0x590 [ 1242.974715][T26220] ____sys_sendmsg+0x61b/0x980 [ 1242.979547][T26220] ? __asan_memset+0x22/0x40 [ 1242.984196][T26220] ? __sys_sendmsg_sock+0x30/0x30 [ 1242.989261][T26220] ? __import_iovec+0x5f2/0x850 [ 1242.994174][T26220] ? import_iovec+0x73/0xa0 [ 1242.998743][T26220] ___sys_sendmsg+0x2a6/0x360 [ 1243.003660][T26220] ? __sys_sendmsg+0x2b0/0x2b0 [ 1243.008509][T26220] ? trace_call_bpf+0xc3/0x6c0 [ 1243.013356][T26220] __se_sys_sendmsg+0x1d0/0x2c0 [ 1243.018286][T26220] ? perf_trace_preemptirq_template+0x269/0x330 [ 1243.024583][T26220] ? __x64_sys_sendmsg+0x80/0x80 [ 1243.029588][T26220] ? lockdep_hardirqs_on+0x98/0x150 [ 1243.034941][T26220] do_syscall_64+0x55/0xb0 [ 1243.039408][T26220] ? clear_bhb_loop+0x40/0x90 [ 1243.044140][T26220] ? clear_bhb_loop+0x40/0x90 [ 1243.048918][T26220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.054867][T26220] RIP: 0033:0x7fdb7b79e0d9 [ 1243.059341][T26220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.079007][T26220] RSP: 002b:00007fdb7c6e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1243.087765][T26220] RAX: ffffffffffffffda RBX: 00007fdb7ba25fa0 RCX: 00007fdb7b79e0d9 [ 1243.095783][T26220] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1243.103811][T26220] RBP: 00007fdb7b835024 R08: 0000000000000000 R09: 0000000000000000 [ 1243.111830][T26220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.119849][T26220] R13: 00007fdb7ba26038 R14: 00007fdb7ba25fa0 R15: 00007ffec2ee8c68 [ 1243.128064][T26220] [ 1243.215802][T26224] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5413'. [ 1243.333062][T26230] netlink: 'syz.2.5414': attribute type 8 has an invalid length. [ 1243.359019][T26230] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5414'. [ 1243.710746][T26238] netlink: 'syz.4.5416': attribute type 9 has an invalid length. [ 1243.743947][T26238] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1244.316022][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1245.629573][T26256] netlink: 'syz.2.5421': attribute type 21 has an invalid length. [ 1245.657071][T26256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5421'. [ 1246.397521][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1247.394189][T26287] netlink: 39 bytes leftover after parsing attributes in process `syz.4.5431'. [ 1248.232731][T26293] sctp: [Deprecated]: syz.4.5433 (pid 26293) Use of int in max_burst socket option deprecated. [ 1248.232731][T26293] Use struct sctp_assoc_value instead [ 1248.486379][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1250.437790][T26337] netlink: 'syz.1.5446': attribute type 9 has an invalid length. [ 1250.453749][T26337] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5446'. [ 1250.555142][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1250.819658][T26341] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1251.517351][T26361] sit0: left promiscuous mode [ 1252.422278][T26377] netlink: 'syz.4.5459': attribute type 10 has an invalid length. [ 1252.443271][T26377] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5459'. [ 1252.633711][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1252.976747][T26390] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1253.175059][T26388] netlink: 'syz.2.5463': attribute type 10 has an invalid length. [ 1253.223336][T26388] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5463'. [ 1253.232593][T26388] hsr0: entered promiscuous mode [ 1253.238136][T26388] bridge0: port 3(hsr0) entered blocking state [ 1253.246759][T26388] bridge0: port 3(hsr0) entered disabled state [ 1253.253461][T26388] hsr0: entered allmulticast mode [ 1253.258646][T26388] hsr_slave_0: entered allmulticast mode [ 1253.290243][T26393] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1254.798773][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1255.204278][T26425] netlink: 'syz.4.5475': attribute type 9 has an invalid length. [ 1255.323329][T26425] netlink: 'syz.4.5475': attribute type 23 has an invalid length. [ 1255.331440][T26425] netlink: 156008 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1255.345486][T26426] netlink: 'syz.4.5475': attribute type 1 has an invalid length. [ 1255.418389][T26426] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1255.784731][T26437] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.5479'. [ 1255.803285][T26437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5479'. [ 1255.886028][T26437] netlink: 'syz.2.5479': attribute type 9 has an invalid length. [ 1255.908286][T26437] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5479'. [ 1256.341487][T26447] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5482'. [ 1256.368501][T26449] netlink: 'syz.1.5483': attribute type 46 has an invalid length. [ 1256.383763][T26446] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5482'. [ 1256.407422][T26449] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1256.627681][T26457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5485'. [ 1256.659934][T26453] tap0: tun_chr_ioctl cmd 1074025677 [ 1256.679217][T26461] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5486'. [ 1256.703286][T26453] tap0: linktype set to 778 [ 1256.802293][T26461] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1256.873547][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1257.694559][T26468] vcan0: entered allmulticast mode [ 1257.764551][T26474] netlink: 'syz.2.5491': attribute type 9 has an invalid length. [ 1257.782860][T26474] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5491'. [ 1258.310175][T26490] netlink: 'syz.0.5494': attribute type 21 has an invalid length. [ 1258.390042][T26490] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1258.959644][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1259.588109][T26506] lo: entered promiscuous mode [ 1259.936979][T26521] netlink: 'syz.4.5504': attribute type 29 has an invalid length. [ 1259.954558][T26521] netlink: 'syz.4.5504': attribute type 29 has an invalid length. [ 1260.050589][T26525] netlink: 'syz.0.5507': attribute type 3 has an invalid length. [ 1260.060023][T26526] netlink: 'syz.4.5504': attribute type 29 has an invalid length. [ 1260.073257][T26525] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.5507'. [ 1260.247135][T26528] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5506'. [ 1260.374789][T26535] netlink: 'syz.0.5508': attribute type 21 has an invalid length. [ 1260.614985][T26538] netlink: 'syz.4.5509': attribute type 22 has an invalid length. [ 1260.740212][T26538] netlink: 'syz.4.5509': attribute type 9 has an invalid length. [ 1260.873928][T26550] delete_channel: no stack [ 1260.957006][T26550] delete_channel: no stack [ 1260.976631][T26549] __nla_validate_parse: 2 callbacks suppressed [ 1260.976654][T26549] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1261.035495][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1261.739388][T26555] netlink: 'syz.0.5513': attribute type 6 has an invalid length. [ 1261.754912][T26555] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1261.849404][T26565] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.5514'. [ 1262.062759][T26558] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5514'. [ 1262.433948][T26577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1262.441678][T26577] IPv6: NLM_F_CREATE should be set when creating new route [ 1262.449693][T26577] IPv6: NLM_F_CREATE should be set when creating new route [ 1262.457503][T26577] IPv6: NLM_F_CREATE should be set when creating new route [ 1262.690639][T26589] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.5522'. [ 1262.716850][T26589] openvswitch: netlink: Message has 20476 unknown bytes. [ 1263.113997][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1263.142330][T26602] validate_nla: 1 callbacks suppressed [ 1263.142351][T26602] netlink: 'syz.4.5527': attribute type 13 has an invalid length. [ 1263.185869][T26602] netlink: 24643 bytes leftover after parsing attributes in process `syz.4.5527'. [ 1265.193176][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1265.317255][T26650] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5540'. [ 1265.350601][T26653] netlink: 'syz.2.5539': attribute type 12 has an invalid length. [ 1265.398910][T26653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5539'. [ 1266.203412][T26669] netlink: 'syz.4.5545': attribute type 4 has an invalid length. [ 1266.240021][T26665] netlink: 'syz.1.5543': attribute type 10 has an invalid length. [ 1267.143488][T26665] team0 (unregistering): Port device team_slave_0 removed [ 1267.160450][T26686] netlink: 149044 bytes leftover after parsing attributes in process `syz.4.5548'. [ 1267.202852][T26665] team0 (unregistering): Port device team_slave_1 removed [ 1267.274280][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1267.294635][T26665] team0 (unregistering): Port device geneve1 removed [ 1267.389532][T26686] netlink: 'syz.4.5548': attribute type 10 has an invalid length. [ 1267.410148][T26686] veth0_macvtap: left promiscuous mode [ 1267.692175][T26680] hsr0: left allmulticast mode [ 1267.700523][T26680] hsr_slave_0: left allmulticast mode [ 1267.709556][T26680] bridge0: port 3(hsr0) entered disabled state [ 1267.721497][T26680] bridge_slave_1: left allmulticast mode [ 1267.748664][T26680] bridge_slave_1: left promiscuous mode [ 1267.755921][T26680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.786132][T26680] bridge_slave_0: left promiscuous mode [ 1267.792262][T26680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.976219][T26732] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5559'. [ 1269.263652][T26735] netlink: 'syz.4.5560': attribute type 2 has an invalid length. [ 1269.271584][T26735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5560'. [ 1269.354298][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1269.436249][T26743] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.5562'. [ 1269.984010][T26759] veth1_macvtap: left promiscuous mode [ 1269.992972][T26759] macsec0: entered allmulticast mode [ 1270.011711][T26761] netlink: 'syz.4.5567': attribute type 9 has an invalid length. [ 1270.031939][T26761] netlink: 395 bytes leftover after parsing attributes in process `syz.4.5567'. [ 1271.433242][ T5782] Bluetooth: hci0: command 0x206e tx timeout [ 1271.580235][T26799] netlink: 4065 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1271.606026][T26796] syzkaller0: entered promiscuous mode [ 1271.613170][T26796] syzkaller0: entered allmulticast mode [ 1271.635719][T26799] netlink: 4065 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1271.693200][T26793] netlink: 4065 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1271.704788][T26801] netlink: 4065 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1271.918141][T26807] netlink: 'syz.0.5580': attribute type 58 has an invalid length. [ 1271.927801][T26807] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5580'. [ 1272.358092][T26820] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1272.599329][T26829] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1272.612931][T26829] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1272.641795][T26829] bond0: (slave bond_slave_0): Releasing backup interface [ 1272.662051][T26829] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1272.924674][T26840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5590'. [ 1273.261994][T26851] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5594'. [ 1273.557754][T26861] netlink: 'syz.0.5597': attribute type 1 has an invalid length. [ 1273.607138][T26861] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1273.618636][T26851] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5594'. [ 1273.622279][T26864] netlink: 'syz.2.5596': attribute type 3 has an invalid length. [ 1273.682140][T26859] netlink: 'syz.2.5596': attribute type 10 has an invalid length. [ 1273.692142][T26864] netlink: 'syz.2.5596': attribute type 1 has an invalid length. [ 1273.707956][T26864] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1274.835483][T26882] netlink: 'syz.2.5603': attribute type 4 has an invalid length. [ 1274.848433][T26882] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1275.801894][T26909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1276.358457][T26930] netlink: 'syz.4.5617': attribute type 10 has an invalid length. [ 1277.359947][T26948] delete_channel: no stack [ 1277.366402][T26948] delete_channel: no stack [ 1278.247119][T26975] netlink: 64007 bytes leftover after parsing attributes in process `syz.2.5628'. [ 1278.526567][T26982] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5630'. [ 1278.546390][T26980] veth1_macvtap: left allmulticast mode [ 1278.552245][T26980] veth1_macvtap: left promiscuous mode [ 1278.562062][T26982] netlink: zone id is out of range [ 1278.586296][T26980] macsec0: left promiscuous mode [ 1278.601676][T26982] netlink: zone id is out of range [ 1278.613431][T26982] netlink: zone id is out of range [ 1278.622979][T26983] veth1_macvtap: entered promiscuous mode [ 1278.633795][T26982] netlink: zone id is out of range [ 1278.639004][T26982] netlink: zone id is out of range [ 1278.655209][T26983] veth1_macvtap: entered allmulticast mode [ 1278.661173][T26983] macsec0: entered promiscuous mode [ 1278.701070][T26982] netlink: zone id is out of range [ 1278.723947][T26982] netlink: zone id is out of range [ 1278.747437][T26982] netlink: zone id is out of range [ 1278.785373][T26982] netlink: zone id is out of range [ 1278.882748][T26982] netlink: zone id is out of range [ 1279.150467][T26997] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5632'. [ 1279.160533][T26990] syzkaller0: entered promiscuous mode [ 1279.195746][T26990] syzkaller0: entered allmulticast mode [ 1279.564854][T27006] delete_channel: no stack [ 1279.581445][T27006] delete_channel: no stack [ 1285.195903][T27002] netlink: 'syz.2.5633': attribute type 10 has an invalid length. [ 1285.210622][T27009] netlink: 'syz.4.5635': attribute type 28 has an invalid length. [ 1285.223232][T27009] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5635'. [ 1285.446031][T27018] netlink: 'syz.2.5636': attribute type 29 has an invalid length. [ 1285.464929][T27018] netlink: 'syz.2.5636': attribute type 29 has an invalid length. [ 1285.514869][T27018] netlink: 'syz.2.5636': attribute type 29 has an invalid length. [ 1285.548322][T27018] netlink: 'syz.2.5636': attribute type 29 has an invalid length. [ 1285.577431][T27018] netlink: 'syz.2.5636': attribute type 29 has an invalid length. [ 1285.819988][T27037] netlink: 'syz.2.5642': attribute type 2 has an invalid length. [ 1285.887308][T27037] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.5642'. [ 1286.472859][T27052] netlink: 'syz.1.5645': attribute type 10 has an invalid length. [ 1286.991912][T27068] netlink: 'syz.2.5649': attribute type 10 has an invalid length. [ 1287.011363][T27068] team0: Device hsr_slave_0 failed to register rx_handler [ 1287.444486][T27079] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5653'. [ 1287.584794][T27079] net_ratelimit: 251 callbacks suppressed [ 1287.584814][T27079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1287.817679][T27086] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5655'. [ 1287.922825][T27089] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5656'. [ 1288.593521][T27095] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.5658'. [ 1288.869587][T27113] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1289.087997][T27117] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1289.103721][T27118] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1289.125432][T27114] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1289.923297][ T5782] Bluetooth: hci1: Malformed LE Event: 0x0b [ 1293.100337][T27151] validate_nla: 1 callbacks suppressed [ 1293.100353][T27151] netlink: 'syz.4.5671': attribute type 10 has an invalid length. [ 1293.456161][T27164] netlink: 'syz.1.5674': attribute type 10 has an invalid length. [ 1293.474508][T27164] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.5674'. [ 1293.751847][T27175] delete_channel: no stack [ 1293.760719][T27175] delete_channel: no stack [ 1294.332658][T27194] netlink: 'syz.0.5681': attribute type 10 has an invalid length. [ 1294.399730][T27195] syzkaller0: entered promiscuous mode [ 1294.405890][T27195] syzkaller0: entered allmulticast mode [ 1295.820148][T27215] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5687'. [ 1296.028966][T27217] netlink: 'syz.0.5689': attribute type 39 has an invalid length. [ 1296.233010][T27222] netlink: 'syz.4.5690': attribute type 3 has an invalid length. [ 1296.244304][T27222] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1296.846917][T27236] netlink: 'syz.0.5694': attribute type 2 has an invalid length. [ 1296.873364][T27236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1296.906198][T27237] netlink: 'syz.0.5694': attribute type 2 has an invalid length. [ 1296.925131][T27237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1297.029236][T27238] netlink: 'syz.1.5693': attribute type 10 has an invalid length. [ 1297.079641][T27236] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1297.179995][T27242] netlink: 'syz.4.5695': attribute type 5 has an invalid length. [ 1298.058448][T27258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5699'. [ 1298.192617][T27263] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.5701'. [ 1298.226032][T27263] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5701'. [ 1298.922413][T27287] netlink: 'syz.2.5707': attribute type 10 has an invalid length. [ 1300.360530][T27305] netlink: 'syz.2.5712': attribute type 10 has an invalid length. [ 1300.383254][T27305] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1300.422130][T27303] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.5713'. [ 1300.504906][T27306] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5713'. [ 1300.534913][T27303] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5713'. [ 1300.905176][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.911900][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.247215][T27323] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.5719'. [ 1301.295768][T27327] netlink: 'syz.4.5720': attribute type 10 has an invalid length. [ 1301.516520][T27330] netlink: 'syz.0.5721': attribute type 21 has an invalid length. [ 1302.036424][T27335] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.5722'. [ 1302.057731][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 1302.406975][T27345] netlink: 'syz.1.5726': attribute type 21 has an invalid length. [ 1302.415746][T27345] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5726'. [ 1302.558906][T27343] sock: sock_timestamping_bind_phc: sock not bind to device [ 1302.572173][T27343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1303.472323][T27364] netlink: 'syz.0.5727': attribute type 41 has an invalid length. [ 1303.533464][T27364] netlink: 'syz.0.5727': attribute type 41 has an invalid length. [ 1303.932800][T27376] netlink: 'syz.4.5732': attribute type 4 has an invalid length. [ 1303.976045][T27376] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5732'. [ 1304.923495][T27385] netlink: 'syz.4.5734': attribute type 10 has an invalid length. [ 1321.024143][T27398] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1321.056914][T27399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1321.066263][T27399] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1321.077802][T27399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1321.086230][T27399] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1321.094626][T27399] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1321.103313][T27399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1321.113972][T27399] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1321.122708][T27399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1321.131581][T27399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1321.140853][T27399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1321.150705][T27399] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1321.158521][T27399] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1321.167328][T27399] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1321.175456][T27399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1321.206437][T27403] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1321.214241][T27403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1321.222568][T27403] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1321.231290][T27403] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1321.243563][T27403] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1321.251179][T27403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1321.264373][T27398] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1321.273363][T27398] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1321.282044][T27398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1322.434547][T27389] chnl_net:caif_netlink_parms(): no params data found [ 1322.481370][T27400] chnl_net:caif_netlink_parms(): no params data found [ 1322.509477][T27393] chnl_net:caif_netlink_parms(): no params data found [ 1322.762071][T27390] chnl_net:caif_netlink_parms(): no params data found [ 1323.413909][T27400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.421178][T27400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.443406][T27400] bridge_slave_0: entered allmulticast mode [ 1323.451272][T27400] bridge_slave_0: entered promiscuous mode [ 1323.524056][T27389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.532219][T27389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.552002][T27389] bridge_slave_0: entered allmulticast mode [ 1323.560469][T27389] bridge_slave_0: entered promiscuous mode [ 1323.583439][T27400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.590691][T27400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.623463][T27400] bridge_slave_1: entered allmulticast mode [ 1323.641042][T27400] bridge_slave_1: entered promiscuous mode [ 1323.691992][T27389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.710838][T27389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.719224][T27389] bridge_slave_1: entered allmulticast mode [ 1323.735293][T27389] bridge_slave_1: entered promiscuous mode [ 1323.822755][T27390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.837663][T27390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.859860][T27390] bridge_slave_0: entered allmulticast mode [ 1323.873312][T27396] Bluetooth: hci2: command tx timeout [ 1323.883545][T27390] bridge_slave_0: entered promiscuous mode [ 1323.889573][T27396] Bluetooth: hci7: command tx timeout [ 1323.896606][T27396] Bluetooth: hci6: command tx timeout [ 1323.902504][T27396] Bluetooth: hci5: command tx timeout [ 1323.918404][T27393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.933306][T27393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.953384][T27393] bridge_slave_0: entered allmulticast mode [ 1323.973594][T27393] bridge_slave_0: entered promiscuous mode [ 1324.021819][T27389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.046179][T27390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.063346][T27390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.070856][T27390] bridge_slave_1: entered allmulticast mode [ 1324.090876][T27390] bridge_slave_1: entered promiscuous mode [ 1324.127319][T27393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.144724][T27393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.167431][T27393] bridge_slave_1: entered allmulticast mode [ 1324.184567][T27393] bridge_slave_1: entered promiscuous mode [ 1324.220992][T27400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.246434][T27389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.320248][T27393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.344071][T27400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.409079][T27390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.913600][T27396] Bluetooth: hci6: command tx timeout [ 1325.919174][T27396] Bluetooth: hci7: command tx timeout [ 1325.924919][T27398] Bluetooth: hci2: command tx timeout [ 1325.932662][T27403] Bluetooth: hci5: command tx timeout [ 1327.993441][T27403] Bluetooth: hci7: command tx timeout [ 1327.998945][T27403] Bluetooth: hci2: command tx timeout [ 1328.010712][T27396] Bluetooth: hci6: command tx timeout [ 1328.021065][ T5788] Bluetooth: hci5: command tx timeout [ 1330.074067][ T5788] Bluetooth: hci5: command tx timeout [ 1330.079655][ T5788] Bluetooth: hci2: command tx timeout [ 1330.085822][T27403] Bluetooth: hci6: command tx timeout [ 1330.091273][T27403] Bluetooth: hci7: command tx timeout [ 1362.321659][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.328134][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1381.492501][T27403] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1381.503183][T27403] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1381.514917][T27403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1381.524875][T27403] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1381.532951][T27403] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1381.547196][T27403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1381.724156][T27398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1381.743290][T27398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1381.751890][T27398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1381.763951][T27398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1381.772041][T27398] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1381.783884][T27398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1381.964516][T27396] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1381.977857][T27396] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1381.986431][T27396] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1381.998006][T27396] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1382.011462][T27396] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1382.020155][T27396] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1382.565943][T27402] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1382.575761][T27402] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1382.585070][T27402] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1382.595423][T27402] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1382.604971][T27402] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1382.612550][T27402] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1444.793761][T27399] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1444.807759][T27399] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1444.816731][T27399] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1444.843527][T27399] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1444.852797][T27399] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1444.861176][T27399] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1445.134121][ T5782] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1445.151598][ T5782] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1445.160388][ T5782] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1445.173372][ T5782] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1445.193900][ T5782] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1445.201676][ T5782] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1446.534874][T27480] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1446.546855][T27480] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1446.573258][T27480] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1446.583444][T27480] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1446.592005][T27480] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1446.606327][T27480] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1446.815495][T27483] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1446.826904][T27483] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1446.839126][T27483] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1446.849940][T27483] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1446.860227][T27483] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1446.868874][T27483] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1481.712959][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1481.720100][ C1] rcu: 1-....: (10479 ticks this GP) idle=231c/1/0x4000000000000000 softirq=110007/110010 fqs=4944 [ 1481.732930][ C1] rcu: hardirqs softirqs csw/system [ 1481.739561][ C1] rcu: number: 1281099 0 0 [ 1481.746192][ C1] rcu: cputime: 24051 28428 35 ==> 52500(ms) [ 1481.754154][ C1] rcu: (t=10504 jiffies g=151117 q=1836 ncpus=2) [ 1481.760630][ C1] CPU: 1 PID: 27366 Comm: syz.2.5730 Not tainted syzkaller #0 [ 1481.768239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1481.778355][ C1] RIP: 0010:rcu_read_unlock_special+0x83/0x4d0 [ 1481.784567][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 9e b3 91 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1481.805086][ C1] RSP: 0018:ffffc900001f0b00 EFLAGS: 00000206 [ 1481.811206][ C1] RAX: 6c50751e0a342500 RBX: 1ffff9200003e164 RCX: 6c50751e0a342500 [ 1481.819365][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32a0 [ 1481.827389][ C1] RBP: ffffc900001f0be0 R08: ffffffff911ee5ff R09: 1ffffffff223dcbf [ 1481.835511][ C1] R10: dffffc0000000000 R11: fffffbfff223dcc0 R12: ffffffff8d137001 [ 1481.843558][ C1] R13: dffffc0000000000 R14: ffff8880b8f3d180 R15: ffff88805f2a1e00 [ 1481.851937][ C1] FS: 00007f63e54f46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1481.860922][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.867720][ C1] CR2: 0000562ad8138598 CR3: 000000006b08f000 CR4: 00000000003506e0 [ 1481.875762][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1481.884475][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1481.892576][ C1] Call Trace: [ 1481.896025][ C1] [ 1481.899287][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1481.904370][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1481.909699][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1481.915124][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1481.920021][ C1] ? ieee80211_rx_napi+0xd2/0x3c0 [ 1481.925176][ C1] ieee80211_rx_napi+0x241/0x3c0 [ 1481.930304][ C1] ? ieee80211_rx_list+0x3240/0x3240 [ 1481.935629][ C1] ? skb_dequeue+0x124/0x160 [ 1481.940344][ C1] ieee80211_handle_queued_frames+0x105/0x190 [ 1481.946645][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 1481.952398][ C1] tasklet_action_common+0x2d4/0x460 [ 1481.957772][ C1] ? scsi_end_request+0x65e/0x800 [ 1481.962879][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 1481.968552][ C1] ? scsi_io_completion+0x141/0x390 [ 1481.973843][ C1] handle_softirqs+0x27d/0x820 [ 1481.978727][ C1] ? read_tsc+0x9/0x20 [ 1481.982954][ C1] ? ktime_get+0x24b/0x280 [ 1481.987512][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1481.992745][ C1] ? do_softirq+0x1a0/0x1a0 [ 1481.997297][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1482.002631][ C1] __irq_exit_rcu+0xd3/0x190 [ 1482.007358][ C1] ? irq_exit_rcu+0x20/0x20 [ 1482.012610][ C1] irq_exit_rcu+0x9/0x20 [ 1482.017060][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1482.023182][ C1] [ 1482.026658][ C1] [ 1482.029615][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1482.035760][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 1482.041855][ C1] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 47 3b 09 e8 0e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1482.062371][ C1] RSP: 0018:ffffc900055ef7c0 EFLAGS: 00000282 [ 1482.069369][ C1] RAX: 6c50751e0a342500 RBX: 0000000000000000 RCX: 6c50751e0a342500 [ 1482.077502][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32a0 [ 1482.086099][ C1] RBP: ffffc900055ef810 R08: ffffffff911ee5ff R09: 1ffffffff223dcbf [ 1482.094647][ C1] R10: dffffc0000000000 R11: fffffbfff223dcc0 R12: ffff88805f2a1e00 [ 1482.103013][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 1482.111261][ C1] __schedule+0x15b6/0x4660 [ 1482.115837][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1482.123260][ C1] ? lock_chain_count+0x20/0x20 [ 1482.128146][ C1] ? asan.module_dtor+0x20/0x20 [ 1482.134085][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1482.139351][ C1] preempt_schedule_irq+0xbf/0x150 [ 1482.144504][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1482.150353][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1482.156203][ C1] irqentry_exit+0x67/0x70 [ 1482.160654][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1482.166766][ C1] RIP: 0010:preempt_schedule_common+0x11/0xc0 [ 1482.172867][ C1] Code: 41 5e 5d c3 e8 10 00 00 00 eb d0 e8 99 af f7 ff 66 0f 1f 84 00 00 00 00 00 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df eb 0d <48> f7 03 08 00 00 00 0f 84 99 00 00 00 65 ff 05 33 0e 6c 75 65 8b [ 1482.192676][ C1] RSP: 0018:ffffc900055efba0 EFLAGS: 00000246 [ 1482.198784][ C1] RAX: 1ffff1100be543c0 RBX: ffff88805f2a1e00 RCX: ffffffff815dca13 [ 1482.206797][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88801ef0df00 [ 1482.214881][ C1] RBP: ffffc900055efc38 R08: ffff88801ef0df03 R09: 1ffff11003de1be0 [ 1482.222891][ C1] R10: dffffc0000000000 R11: ffffed1003de1be1 R12: dffffc0000000000 [ 1482.231080][ C1] R13: 1ffff92000abdfb8 R14: ffff88805f2a32d0 R15: dffffc0000000000 [ 1482.239273][ C1] ? finish_task_switch+0x323/0x8f0 [ 1482.244615][ C1] preempt_schedule+0xc0/0xd0 [ 1482.249427][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1482.255215][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1482.261527][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1482.267226][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 1482.273190][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1482.278190][ C1] __se_sys_perf_event_open+0x1849/0x1c60 [ 1482.284151][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1482.289853][ C1] ? lock_chain_count+0x20/0x20 [ 1482.294759][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1482.300150][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1482.306107][ C1] do_syscall_64+0x55/0xb0 [ 1482.310750][ C1] ? clear_bhb_loop+0x40/0x90 [ 1482.315816][ C1] ? clear_bhb_loop+0x40/0x90 [ 1482.320705][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1482.326632][ C1] RIP: 0033:0x7f63e459e0d9 [ 1482.331104][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.350830][ C1] RSP: 002b:00007f63e54f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1482.359320][ C1] RAX: ffffffffffffffda RBX: 00007f63e4826090 RCX: 00007f63e459e0d9 [ 1482.367366][ C1] RDX: ffffff7fffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 1482.375392][ C1] RBP: 00007f63e4635024 R08: 0000000000000008 R09: 0000000000000000 [ 1482.383759][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1482.392333][ C1] R13: 00007f63e4826128 R14: 00007f63e4826090 R15: 00007ffc4a481af8 [ 1482.400394][ C1] [ 1482.573425][ T29] INFO: task kworker/u4:15:21034 blocked for more than 143 seconds. [ 1482.582318][ T29] Not tainted syzkaller #0 [ 1482.653018][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1482.662874][ T29] task:kworker/u4:15 state:D stack:24520 pid:21034 ppid:2 flags:0x00004000 [ 1482.803344][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 1482.810060][ T29] Call Trace: [ 1482.883045][ T29] [ 1482.886086][ T29] __schedule+0x15ae/0x4660 [ 1482.890776][ T29] ? asan.module_dtor+0x20/0x20 [ 1482.983077][ T29] ? __mutex_lock+0x66e/0xc80 [ 1482.988406][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1483.073029][ T29] ? kthread_data+0x4f/0xc0 [ 1483.077680][ T29] ? wq_worker_sleeping+0x63/0x240 [ 1483.143008][ T29] schedule+0xbd/0x170 [ 1483.147209][ T29] schedule_preempt_disabled+0x13/0x20 [ 1483.152774][ T29] __mutex_lock+0x673/0xc80 [ 1483.243002][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1483.263005][ T29] ? addrconf_verify_work+0x19/0x30 [ 1483.268497][ T29] ? mutex_lock_nested+0x20/0x20 [ 1483.322997][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1483.329477][ T29] ? read_lock_is_recursive+0x20/0x20 [ 1483.393009][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1483.398617][ T29] addrconf_verify_work+0x19/0x30 [ 1483.471038][ T29] ? process_scheduled_works+0x975/0x1600 [ 1483.522988][ T29] process_scheduled_works+0xa60/0x1600 [ 1483.528801][ T29] ? worker_attach_to_pool+0x370/0x370 [ 1483.613010][ T29] ? assign_work+0x3cc/0x5d0 [ 1483.617992][ T29] worker_thread+0xa5e/0xfe0 [ 1483.622840][ T29] ? _raw_spin_unlock+0x40/0x40 [ 1483.693253][ T29] ? __kthread_parkme+0x71/0x1c0 [ 1483.698416][ T29] kthread+0x2fa/0x390 [ 1483.702788][ T29] ? pr_cont_work+0x550/0x550 [ 1483.773009][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1483.777715][ T29] ret_from_fork+0x48/0x80 [ 1483.782201][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1483.866488][ T29] ret_from_fork_asm+0x11/0x20 [ 1483.871419][ T29] [ 1483.883035][ T29] INFO: task syz-executor:27389 blocked for more than 145 seconds. [ 1483.891483][ T29] Not tainted syzkaller #0 [ 1483.933005][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1483.941870][ T29] task:syz-executor state:D stack:22344 pid:27389 ppid:1 flags:0x00004004 [ 1484.043038][ T29] Call Trace: [ 1484.046435][ T29] [ 1484.049528][ T29] __schedule+0x15ae/0x4660 [ 1484.173070][ T29] ? asan.module_dtor+0x20/0x20 [ 1484.178498][ T29] ? __mutex_lock+0x66e/0xc80 [ 1484.235439][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1484.241260][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1484.303043][ T29] schedule+0xbd/0x170 [ 1484.307374][ T29] schedule_preempt_disabled+0x13/0x20 [ 1484.312917][ T29] __mutex_lock+0x673/0xc80 [ 1484.377712][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1484.382661][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1484.443011][ T29] ? mutex_lock_nested+0x20/0x20 [ 1484.448373][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 1484.502995][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1484.509082][ T29] ? rtnetlink_bind+0x80/0x80 [ 1484.563980][ T29] ? mark_lock+0x94/0x320 [ 1484.568409][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1484.613015][ T29] ? mark_lock+0x94/0x320 [ 1484.617466][ T29] ? mark_lock+0x94/0x320 [ 1484.621974][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1484.703283][ T29] ? kmalloc_reserve+0x95/0x240 [ 1484.708879][ T29] ? verify_lock_unused+0x140/0x140 [ 1484.772999][ T29] ? verify_lock_unused+0x140/0x140 [ 1484.778863][ T29] netlink_rcv_skb+0x235/0x4c0 [ 1484.823009][ T29] ? rtnetlink_bind+0x80/0x80 [ 1484.827991][ T29] ? netlink_ack+0x1160/0x1160 [ 1484.832836][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1484.903000][ T29] ? net_generic+0x1e/0x240 [ 1484.907647][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1484.912922][ T29] netlink_unicast+0x7b1/0x930 [ 1484.958024][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1484.962874][ T29] ? netlink_getsockopt+0x590/0x590 [ 1485.053009][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1485.058865][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1485.122992][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1485.128672][ T29] __sys_sendto+0x4a9/0x6b0 [ 1485.183026][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 1485.188868][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1485.243072][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1485.249294][ T29] ? lock_chain_count+0x20/0x20 [ 1485.323031][ T29] __x64_sys_sendto+0xde/0xf0 [ 1485.328106][ T29] do_syscall_64+0x55/0xb0 [ 1485.332872][ T29] ? clear_bhb_loop+0x40/0x90 [ 1485.422995][ T29] ? clear_bhb_loop+0x40/0x90 [ 1485.428346][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1485.493340][ T29] RIP: 0033:0x7f483055e90e [ 1485.498095][ T29] RSP: 002b:00007ffe64bb0e68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1485.573009][ T29] RAX: ffffffffffffffda RBX: 0000555574352500 RCX: 00007f483055e90e [ 1485.581382][ T29] RDX: 0000000000000088 RSI: 00007f4831354670 RDI: 0000000000000003 [ 1485.702995][ T29] RBP: 0000000000000001 R08: 00007ffe64bb0ee4 R09: 000000000000000c [ 1485.711590][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1485.815754][ T29] R13: 0000000000000000 R14: 00007f4831354670 R15: 0000000000000000 [ 1485.853047][ T29] [ 1485.856165][ T29] INFO: task syz-executor:27390 blocked for more than 147 seconds. [ 1485.913047][ T29] Not tainted syzkaller #0 [ 1485.918261][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1485.993561][ T29] task:syz-executor state:D stack:22344 pid:27390 ppid:1 flags:0x00004004 [ 1486.072990][ T29] Call Trace: [ 1486.076538][ T29] [ 1486.079630][ T29] __schedule+0x15ae/0x4660 [ 1486.143038][ T29] ? asan.module_dtor+0x20/0x20 [ 1486.148023][ T29] ? __mutex_lock+0x66e/0xc80 [ 1486.152779][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1486.265863][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1486.272182][ T29] schedule+0xbd/0x170 [ 1486.333015][ T29] schedule_preempt_disabled+0x13/0x20 [ 1486.338929][ T29] __mutex_lock+0x673/0xc80 [ 1486.433006][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1486.438077][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1486.492997][ T29] ? mutex_lock_nested+0x20/0x20 [ 1486.498956][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 1486.603012][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1486.608401][ T29] ? rtnetlink_bind+0x80/0x80 [ 1486.662999][ T29] ? mark_lock+0x94/0x320 [ 1486.667539][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1486.672734][ T29] ? mark_lock+0x94/0x320 [ 1486.772991][ T29] ? mark_lock+0x94/0x320 [ 1486.777630][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1486.782912][ T29] ? kmalloc_reserve+0x95/0x240 [ 1486.878405][ T29] ? verify_lock_unused+0x140/0x140 [ 1486.943004][ T29] ? verify_lock_unused+0x140/0x140 [ 1486.948646][ T29] netlink_rcv_skb+0x235/0x4c0 [ 1487.023370][ T29] ? rtnetlink_bind+0x80/0x80 [ 1487.028222][ T29] ? netlink_ack+0x1160/0x1160 [ 1487.073079][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1487.078516][ T29] ? net_generic+0x1e/0x240 [ 1487.133011][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1487.138508][ T29] netlink_unicast+0x7b1/0x930 [ 1487.193027][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1487.198099][ T29] ? netlink_getsockopt+0x590/0x590 [ 1487.262999][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1487.312996][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1487.318412][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1487.383009][ T29] __sys_sendto+0x4a9/0x6b0 [ 1487.388015][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 1487.443019][ T29] ? slab_free_freelist_hook+0x130/0x1a0 [ 1487.448796][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1487.516438][ T29] ? __fput+0x67e/0x940 [ 1487.520811][ T29] ? lock_chain_count+0x20/0x20 [ 1487.596863][ T29] __x64_sys_sendto+0xde/0xf0 [ 1487.601791][ T29] do_syscall_64+0x55/0xb0 [ 1487.673005][ T29] ? clear_bhb_loop+0x40/0x90 [ 1487.693349][ T29] ? clear_bhb_loop+0x40/0x90 [ 1487.698943][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1487.783008][ T29] RIP: 0033:0x7f7066b5e90e [ 1487.787544][ T29] RSP: 002b:00007ffe66c6e0d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1487.913267][ T29] RAX: ffffffffffffffda RBX: 0000555582882500 RCX: 00007f7066b5e90e [ 1487.921361][ T29] RDX: 0000000000000028 RSI: 00007f7067954670 RDI: 0000000000000003 [ 1487.941623][ T29] RBP: 0000000000000001 R08: 00007ffe66c6e154 R09: 000000000000000c [ 1487.960087][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1487.969005][ T29] R13: 0000000000000000 R14: 00007f7067954670 R15: 0000000000000000 [ 1487.990482][ T29] [ 1487.997713][ T29] INFO: task syz-executor:27393 blocked for more than 149 seconds. [ 1488.006471][ T29] Not tainted syzkaller #0 [ 1488.011458][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1488.030763][ T29] task:syz-executor state:D stack:22344 pid:27393 ppid:1 flags:0x00004004 [ 1488.042376][ T29] Call Trace: [ 1488.058777][ T29] [ 1488.061846][ T29] __schedule+0x15ae/0x4660 [ 1488.067164][ T29] ? asan.module_dtor+0x20/0x20 [ 1488.072103][ T29] ? __mutex_lock+0x66e/0xc80 [ 1488.103390][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1488.109051][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1488.123555][ T29] schedule+0xbd/0x170 [ 1488.127763][ T29] schedule_preempt_disabled+0x13/0x20 [ 1488.143201][ T29] __mutex_lock+0x673/0xc80 [ 1488.147833][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1488.152592][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1488.174825][ T29] ? mutex_lock_nested+0x20/0x20 [ 1488.179921][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 1488.195785][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1488.201211][ T29] ? rtnetlink_bind+0x80/0x80 [ 1488.213807][ T29] ? mark_lock+0x94/0x320 [ 1488.218356][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1488.236234][ T29] ? mark_lock+0x94/0x320 [ 1488.240686][ T29] ? mark_lock+0x94/0x320 [ 1488.253333][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1488.258605][ T29] ? kmalloc_reserve+0x95/0x240 [ 1488.273579][ T29] ? verify_lock_unused+0x140/0x140 [ 1488.278931][ T29] ? verify_lock_unused+0x140/0x140 [ 1488.295757][ T29] netlink_rcv_skb+0x235/0x4c0 [ 1488.300639][ T29] ? rtnetlink_bind+0x80/0x80 [ 1488.314747][ T29] ? netlink_ack+0x1160/0x1160 [ 1488.319646][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1488.335995][ T29] ? net_generic+0x1e/0x240 [ 1488.340705][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1488.353757][ T29] netlink_unicast+0x7b1/0x930 [ 1488.358650][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1488.375952][ T29] ? netlink_getsockopt+0x590/0x590 [ 1488.381786][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1488.403548][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1488.409194][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1488.432645][ T29] __sys_sendto+0x4a9/0x6b0 [ 1488.437662][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 1488.453190][ T29] ? slab_free_freelist_hook+0x130/0x1a0 [ 1488.459218][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1488.474910][ T29] ? __fput+0x67e/0x940 [ 1488.479176][ T29] ? lock_chain_count+0x20/0x20 [ 1488.493161][ T29] __x64_sys_sendto+0xde/0xf0 [ 1488.498993][ T29] do_syscall_64+0x55/0xb0 [ 1488.512500][ T29] ? clear_bhb_loop+0x40/0x90 [ 1488.517786][ T29] ? clear_bhb_loop+0x40/0x90 [ 1488.522561][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1488.543438][ T29] RIP: 0033:0x7fc7af55e90e [ 1488.548042][ T29] RSP: 002b:00007ffc57f76768 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1488.566017][ T29] RAX: ffffffffffffffda RBX: 000055556f9ff500 RCX: 00007fc7af55e90e [ 1488.580750][ T29] RDX: 0000000000000028 RSI: 00007fc7b0354670 RDI: 0000000000000003 [ 1488.589411][ T29] RBP: 0000000000000001 R08: 00007ffc57f767e4 R09: 000000000000000c [ 1488.611076][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1488.621012][ T29] R13: 0000000000000000 R14: 00007fc7b0354670 R15: 0000000000000000 [ 1488.635263][ T29] [ 1488.638463][ T29] INFO: task syz-executor:27400 blocked for more than 149 seconds. [ 1488.658125][ T29] Not tainted syzkaller #0 [ 1488.668336][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1488.677914][ T29] task:syz-executor state:D stack:22344 pid:27400 ppid:1 flags:0x00004004 [ 1488.698082][ T29] Call Trace: [ 1488.701552][ T29] [ 1488.711593][ T29] __schedule+0x15ae/0x4660 [ 1488.716886][ T29] ? asan.module_dtor+0x20/0x20 [ 1488.722024][ T29] ? __mutex_lock+0x66e/0xc80 [ 1488.736825][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1488.742568][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1488.763550][ T29] schedule+0xbd/0x170 [ 1488.767732][ T29] schedule_preempt_disabled+0x13/0x20 [ 1488.783373][ T29] __mutex_lock+0x673/0xc80 [ 1488.788075][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1488.792825][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1488.808543][ T29] ? mutex_lock_nested+0x20/0x20 [ 1488.820723][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 1488.831062][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1488.841343][ T29] ? rtnetlink_bind+0x80/0x80 [ 1488.851399][ T29] ? mark_lock+0x94/0x320 [ 1488.869258][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1488.893141][ T29] ? mark_lock+0x94/0x320 [ 1488.897600][ T29] ? mark_lock+0x94/0x320 [ 1488.912830][ T29] ? __lock_acquire+0x1262/0x7d80 [ 1488.918681][ T29] ? kmalloc_reserve+0x95/0x240 [ 1488.924744][ T29] ? verify_lock_unused+0x140/0x140 [ 1488.930177][ T29] ? verify_lock_unused+0x140/0x140 [ 1488.949175][ T29] netlink_rcv_skb+0x235/0x4c0 [ 1488.954854][ T29] ? rtnetlink_bind+0x80/0x80 [ 1488.959625][ T29] ? netlink_ack+0x1160/0x1160 [ 1488.977830][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1488.983672][ T29] ? net_generic+0x1e/0x240 [ 1488.988289][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1489.004370][ T29] netlink_unicast+0x7b1/0x930 [ 1489.009646][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1489.023315][ T29] ? netlink_getsockopt+0x590/0x590 [ 1489.028712][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1489.045702][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1489.051092][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1489.066282][ T29] __sys_sendto+0x4a9/0x6b0 [ 1489.070892][ T29] ? __ia32_sys_getpeername+0x90/0x90 [ 1489.085641][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1489.091048][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1489.107114][ T29] ? lock_chain_count+0x20/0x20 [ 1489.112462][ T29] __x64_sys_sendto+0xde/0xf0 [ 1489.123161][ T29] do_syscall_64+0x55/0xb0 [ 1489.127691][ T29] ? clear_bhb_loop+0x40/0x90 [ 1489.132437][ T29] ? clear_bhb_loop+0x40/0x90 [ 1489.150057][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.156884][ T29] RIP: 0033:0x7f511735e90e [ 1489.161371][ T29] RSP: 002b:00007ffd61148088 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1489.181931][ T29] RAX: ffffffffffffffda RBX: 0000555578b9c500 RCX: 00007f511735e90e [ 1489.206714][ T29] RDX: 0000000000000088 RSI: 00007f5118154670 RDI: 0000000000000003 [ 1489.223336][ T29] RBP: 0000000000000001 R08: 00007ffd61148104 R09: 000000000000000c [ 1489.231513][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1489.249783][ T29] R13: 0000000000000000 R14: 00007f5118154670 R15: 0000000000000000 [ 1489.261421][ T29] [ 1489.271881][ T29] [ 1489.271881][ T29] Showing all locks held in the system: [ 1489.295745][ T29] 3 locks held by kworker/1:1/27: [ 1489.300876][ T29] 1 lock held by khungtaskd/29: [ 1489.314809][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1489.334795][ T29] 2 locks held by getty/5526: [ 1489.339649][ T29] #0: ffff8880310b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1489.353810][ T29] #1: ffffc900032762f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 1489.374395][ T29] 4 locks held by kworker/u5:3/5782: [ 1489.380043][ T29] #0: ffff888052027d38 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.404205][ T29] #1: ffffc90004777d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.429913][ T29] #2: ffff888088f600b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1489.450415][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1489.471776][ T29] 4 locks held by kworker/u5:7/5788: [ 1489.477814][ T29] #0: ffff88801ef54538 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.499163][ T29] #1: ffffc900047e7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.512321][ T29] #2: ffff888046b300b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1489.539593][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1489.560443][ T29] 3 locks held by kworker/u4:15/21034: [ 1489.566678][ T29] #0: ffff88802c2ce538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.588186][ T29] #1: ffffc9000bf3fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.612787][ T29] #2: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1489.637776][ T29] 5 locks held by kworker/u4:34/21043: [ 1489.655337][ T29] #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.673233][ T29] #1: ffffc9000bfefd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.698721][ T29] #2: ffff888053ba0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 1489.713434][ T29] #3: ffff8880680b0dc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xac/0x1100 [ 1489.733364][ T29] #4: ffff888053ba17c8 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x584/0x1100 [ 1489.754213][ T29] 5 locks held by kworker/u4:38/21044: [ 1489.760049][ T29] #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.784237][ T29] #1: ffffc9000bfffd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.806711][ T29] #2: ffff888069be0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 1489.817577][ T29] #3: ffff88802c708dc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0 [ 1489.838815][ T29] #4: ffff888069be17c8 (&local->sta_mtx){+.+.}-{3:3}, at: sta_info_destroy_addr+0x54/0xd0 [ 1489.857353][ T29] 3 locks held by kworker/u4:59/21059: [ 1489.874325][ T29] #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.896093][ T29] #1: ffffc9000c6ffd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.921267][ T29] #2: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1489.940319][ T29] 3 locks held by kworker/1:3/24068: [ 1489.948952][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.967881][ T29] #1: ffffc90004cffd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1489.990139][ T29] #2: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1490.004494][ T29] 1 lock held by syz.0.5727/27361: [ 1490.013386][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1490.022519][ T29] 5 locks held by syz.2.5730/27366: [ 1490.037868][ T29] 1 lock held by syz.1.5731/27374: [ 1490.048792][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1490.068286][ T29] 4 locks held by syz.4.5734/27384: [ 1490.083383][ T29] #0: ffff888025ff4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500 [ 1490.103194][ T29] #1: ffff888025ff40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x552/0x1130 [ 1490.123119][ T29] #2: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0x99/0x220 [ 1490.142497][ T29] #3: ffff88805fed4b38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x7b/0x630 [ 1490.152522][ T29] 1 lock held by syz-executor/27389: [ 1490.163124][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.172759][ T29] 1 lock held by syz-executor/27390: [ 1490.197611][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.208405][ T29] 1 lock held by syz-executor/27393: [ 1490.223913][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.243130][ T29] 4 locks held by kworker/u5:0/27396: [ 1490.248935][ T29] #0: ffff88801db7e938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.270381][ T29] #1: ffffc9000b977d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.292921][ T29] #2: ffff88806ab880b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1490.320827][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1490.343161][ T29] 4 locks held by kworker/u5:1/27398: [ 1490.348629][ T29] #0: ffff888025ed2138 ((wq_completion)hci4#4){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.370041][ T29] #1: ffffc90003b0fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.392749][ T29] #2: ffff88806d5b40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1490.414294][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1490.433100][ T29] 4 locks held by kworker/u5:2/27399: [ 1490.438557][ T29] #0: ffff88805ded3938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.462433][ T29] #1: ffffc9000b997d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.488367][ T29] #2: ffff888088f580b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1490.499868][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1490.528906][ T29] 1 lock held by syz-executor/27400: [ 1490.540191][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.553329][ T29] 4 locks held by kworker/u5:4/27402: [ 1490.558970][ T29] #0: ffff88805e17f138 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.581597][ T29] #1: ffffc9000b9c7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.604486][ T29] #2: ffff88807974c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1490.622310][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1490.643285][ T29] 4 locks held by kworker/u5:5/27403: [ 1490.649389][ T29] #0: ffff88801af78538 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.671552][ T29] #1: ffffc9000b9d7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1490.693590][ T29] #2: ffff888045d7c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1490.713044][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1490.736376][ T29] 1 lock held by syz-executor/27446: [ 1490.741858][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.763171][ T29] 1 lock held by syz-executor/27450: [ 1490.768725][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.788944][ T29] 1 lock held by syz-executor/27453: [ 1490.800680][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.821130][ T29] 1 lock held by syz-executor/27455: [ 1490.828533][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1490.843157][ T29] 1 lock held by dhcpcd/27457: [ 1490.848004][ T29] #0: ffff8880659e2130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1490.872902][ T29] 1 lock held by dhcpcd/27458: [ 1490.888167][ T29] #0: ffff88807d80e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1490.910440][ T29] 1 lock held by dhcpcd/27459: [ 1490.922039][ T29] #0: ffff88802d8ae130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1490.942290][ T29] 1 lock held by dhcpcd/27460: [ 1490.947699][ T29] #0: ffff88807d12c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1490.983703][ T29] 1 lock held by dhcpcd/27461: [ 1490.988660][ T29] #0: ffff88802699a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1491.009045][ T29] 1 lock held by dhcpcd/27462: [ 1491.019189][ T29] #0: ffff88801e378130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1491.040813][ T29] 1 lock held by dhcpcd/27463: [ 1491.049153][ T29] #0: ffff88807b20e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1491.060272][ T29] 1 lock held by dhcpcd/27464: [ 1491.073347][ T29] #0: ffff8880798ee130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1491.097108][ T29] 1 lock held by dhcpcd/27465: [ 1491.102489][ T29] #0: ffff888049242130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1491.124237][ T29] 1 lock held by dhcpcd/27466: [ 1491.129101][ T29] #0: ffff88805ea46130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1491.149132][ T29] 1 lock held by syz-executor/27471: [ 1491.157663][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1491.173318][ T29] 1 lock held by syz-executor/27474: [ 1491.179139][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1491.213333][ T29] 1 lock held by syz-executor/27479: [ 1491.218806][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1491.240187][ T29] 1 lock held by syz-executor/27482: [ 1491.250354][ T29] #0: ffffffff8e3d6bc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1491.270411][ T29] 4 locks held by kworker/u5:9/27483: [ 1491.278980][ T29] #0: ffff88802cb7f938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1491.300789][ T29] #1: ffffc90003487d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1491.323485][ T29] #2: ffff888088f640b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1491.348390][ T29] #3: ffffffff8e5440c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1491.373309][ T29] [ 1491.375817][ T29] ============================================= [ 1491.375817][ T29] [ 1491.393144][ T29] NMI backtrace for cpu 0 [ 1491.397681][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1491.405033][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1491.415263][ T29] Call Trace: [ 1491.418590][ T29] [ 1491.421570][ T29] dump_stack_lvl+0x18c/0x250 [ 1491.426313][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 1491.431657][ T29] ? show_regs_print_info+0x20/0x20 [ 1491.437104][ T29] ? load_image+0x420/0x420 [ 1491.442028][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1491.447205][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1491.453450][ T29] ? load_image+0x420/0x420 [ 1491.458018][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1491.463418][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1491.469585][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1491.475921][ T29] watchdog+0xf59/0xfa0 [ 1491.480693][ T29] ? watchdog+0x1e1/0xfa0 [ 1491.485301][ T29] kthread+0x2fa/0x390 [ 1491.489430][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1491.494813][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1491.499458][ T29] ret_from_fork+0x48/0x80 [ 1491.503938][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1491.508695][ T29] ret_from_fork_asm+0x11/0x20 [ 1491.513636][ T29] [ 1491.517724][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1491.523236][ C1] NMI backtrace for cpu 1 [ 1491.523248][ C1] CPU: 1 PID: 27366 Comm: syz.2.5730 Not tainted syzkaller #0 [ 1491.523265][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1491.523276][ C1] RIP: 0010:__asan_memset+0x8/0x40 [ 1491.523317][ C1] Code: 00 00 f3 0f 1e fa 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 dc ea ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 41 56 53 <48> 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 [ 1491.523338][ C1] RSP: 0018:ffffc900001f03a0 EFLAGS: 00000046 [ 1491.523353][ C1] RAX: ffffffff81af2e9c RBX: dffffc0000000000 RCX: ffff88805f2a1e00 [ 1491.523367][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900001f0448 [ 1491.523378][ C1] RBP: ffffc900001f0648 R08: ffffc900001f0457 R09: 0000000000000000 [ 1491.523390][ C1] R10: ffffc900001f0448 R11: fffff5200003e08b R12: ffff88807bf72490 [ 1491.523403][ C1] R13: ffffc900001f0448 R14: ffff8880b8f36990 R15: ffff88807bf72580 [ 1491.523416][ C1] FS: 00007f63e54f46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1491.523431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1491.523449][ C1] CR2: 0000562ad8138598 CR3: 000000006b08f000 CR4: 00000000003506e0 [ 1491.523464][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1491.523475][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1491.523485][ C1] Call Trace: [ 1491.523493][ C1] [ 1491.523501][ C1] perf_tp_event+0x38f/0x1550 [ 1491.523527][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1491.523563][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1491.523588][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1491.523622][ C1] ? sched_clock_cpu+0x75/0x430 [ 1491.523639][ C1] ? read_tsc+0x9/0x20 [ 1491.523657][ C1] ? ktime_get+0x24b/0x280 [ 1491.523680][ C1] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1491.523705][ C1] perf_trace_preemptirq_template+0x269/0x330 [ 1491.523733][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20