last executing test programs: 6m14.288351941s ago: executing program 1 (id=2799): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0xb, 0xfffffffefff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m11.111441089s ago: executing program 1 (id=2804): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @ldst={0x1, 0x1, 0x1, 0x3, 0x5, 0x1, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbf8}, 0x94) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r5) 6m10.165725212s ago: executing program 1 (id=2809): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x7f) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2d, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c", 0x87}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4620, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x400, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000002800)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x6, @mcast2, 0x2, 0x2}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="9e3ed5a3b4f87f15120e35706825dad2d73643abe5b5c800a35edbebaaa7beb3d4202ae554195e56fec4f925165a426594c36e31e53ab388dae0cf05dd64a45268eb85c8202c280b88155c04102f02ca524d910e0ef36420e2b9281143785a889f9a5e1b31c5343977319af93147ed86", 0x70}], 0x2, &(0x7f0000002740)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x593}}], 0x48}, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000700)={0x3, 0x0, [0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) 6m9.768163952s ago: executing program 1 (id=2821): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x7f) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2d, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c", 0x87}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4620, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x400, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000002800)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x6, @mcast2, 0x2, 0x2}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="9e3ed5a3b4f87f15120e35706825dad2d73643abe5b5c800a35edbebaaa7beb3d4202ae554195e56fec4f925165a426594c36e31e53ab388dae0cf05dd64a45268eb85c8202c280b88155c04102f02ca524d910e0ef36420e2b9281143785a889f9a5e1b31c5343977319af93147ed86", 0x70}], 0x2, &(0x7f0000002740)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x593}}], 0x48}, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000700)={0x3, 0x0, [0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xd8, &(0x7f0000000180)=""/216}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) 6m6.560221621s ago: executing program 1 (id=2815): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x7f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2d, &(0x7f0000000040), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4620, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x400, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000002800)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x6, @mcast2, 0x2, 0x2}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="9e3ed5a3b4f87f15120e35706825dad2d73643abe5b5c800a35edbebaaa7beb3d4202ae554195e56fec4f925165a426594c36e31e53ab388dae0cf05dd64a45268eb85c8202c280b88155c04102f02ca524d910e0ef36420e2b9281143785a889f9a5e1b31c5343977319af93147ed86", 0x70}], 0x2, &(0x7f0000002740)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x593}}], 0x90}, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000700)={0x3, 0x0, [0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xd8, &(0x7f0000000180)=""/216}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) 6m6.296871717s ago: executing program 1 (id=2817): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de91281dfdeae217d76ba5342aa8e00c4c3cc93d0128cd25b7403ad0e03d004555b795aa9e1fdbb9535706d86325242fccf954c3f44bcec26e359b6aa319cfeca019998d6cdf9680b4f28b79f7893089d1564e172f67fd6a4baa4cd0d9b7443edf685b93ad323b88d51b391d639f680d6b3709a9d90a6800e9a8ca55552cb0d4f584272d2840d32fca1c9c26"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x40000, @mcast1, 0xa}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="9d15", 0x2}], 0x1}, 0x8051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 5m51.041705202s ago: executing program 32 (id=2817): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de91281dfdeae217d76ba5342aa8e00c4c3cc93d0128cd25b7403ad0e03d004555b795aa9e1fdbb9535706d86325242fccf954c3f44bcec26e359b6aa319cfeca019998d6cdf9680b4f28b79f7893089d1564e172f67fd6a4baa4cd0d9b7443edf685b93ad323b88d51b391d639f680d6b3709a9d90a6800e9a8ca55552cb0d4f584272d2840d32fca1c9c26"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x40000, @mcast1, 0xa}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="9d15", 0x2}], 0x1}, 0x8051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 2m30.832970031s ago: executing program 3 (id=3378): r0 = socket$kcm(0x2, 0x7, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x8050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xe5, &(0x7f00000001c0)=""/229, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x81, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)=[{0x2, 0x1, 0xa, 0x4}, {0x2, 0x3, 0xa, 0x6}, {0x3, 0x3, 0x9, 0x5}], 0x10, 0xfffffeff}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701", 0x9e}, {&(0x7f0000000840)="4360f393060f378e001ca673ea57a426634c163af362c429485c6e48860849d5315196c06ee8c59789df1fbbcd313340d9675037e96958fa6849", 0x3a}], 0x2}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x2b8201, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047440, 0xf0ff1f00000000) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x8000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x4804) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[], 0xf}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='b '], 0xa) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b", 0x23}], 0x1}, 0x4044) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r0}, 0xc) 2m30.618922097s ago: executing program 3 (id=3380): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 2m27.542225862s ago: executing program 3 (id=3386): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de91281dfdeae217d76ba5342aa8e00c4c3cc93d0128cd25b7403ad0e03d004555b795aa9e1fdbb9535706d86325242fccf954c3f44bcec26e359b6aa319cfeca019998d6cdf9680b4f28b79f7893089d1564e172f67fd6a4baa4cd0d9b7443edf685b93ad323b88d51b391d639f680d6b3709a9d90a6800e9a8ca55552cb0d4f584272d2840d32fca1c9c26"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x40000, @mcast1, 0xa}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="9d15", 0x2}], 0x1}, 0x8051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 2m26.628120375s ago: executing program 3 (id=3398): r0 = socket$kcm(0x2, 0x7, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x8050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xe5, &(0x7f00000001c0)=""/229, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x81, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)=[{0x2, 0x1, 0xa, 0x4}, {0x2, 0x3, 0xa, 0x6}, {0x3, 0x3, 0x9, 0x5}], 0x10, 0xfffffeff}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701", 0x9e}, {&(0x7f0000000840)="4360f393060f378e001ca673ea57a426634c163af362c429485c6e48860849d5315196c06ee8c59789df1fbbcd313340d9675037e96958fa6849", 0x3a}], 0x2}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x2b8201, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047440, 0xf0ff1f00000000) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x8000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x4804) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[], 0xf}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='b '], 0xa) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba", 0x29}], 0x1}, 0x4044) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r0}, 0xc) 2m26.212089355s ago: executing program 3 (id=3392): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 2m26.068503238s ago: executing program 3 (id=3394): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 2m10.119447049s ago: executing program 33 (id=3394): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 16.532392605s ago: executing program 5 (id=3813): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 13.202048256s ago: executing program 5 (id=3822): sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c7a4fac2c72fa1174fe6d97ee657558fb733b911010bc6964aba2458e4dc249d45a30f8783b3262424f30fbd562f78284a40bc1105ac0522e934cd672d817ad030c1ed38040e10f2878ecde283f7fcd1f47fce70540b51c97fd481fbc0960c0649d76a080ba51950bdc7a9edd96b26c2d710a21e6af02166146cf954c7e73b1f3c8ad41145de1277d9e0dbe1f91336f9f4d37873b2e1c51bc35e29ea3dc349c7c3345071bde48898784eeb08bfc2eea7624249164ef7edc3f834a22ebb", 0xbd}], 0x1, &(0x7f00000004c0)}, 0x4000800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f00000009c0)={0x2, 0x4001, @private=0xa010101}, 0x10, 0x0}, 0x30004040) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000700000000000000ffffffff85100000010000009500000000000000180900002020702500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 9.996757945s ago: executing program 5 (id=3826): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 9.995168575s ago: executing program 2 (id=3827): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000b500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 9.557241126s ago: executing program 2 (id=3831): sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c7a4fac2c72fa1174fe6d97ee657558fb733b911010bc6964aba2458e4dc249d45a30f8783b3262424f30fbd562f78284a40bc1105ac0522e934cd672d817ad030c1ed38040e10f2878ecde283f7fcd1f47fce70540b51c97fd481fbc0960c0649d76a080ba51950bdc7a9edd96b26c2d710a21e6af02166146cf954c7e73b1f3c8ad41145de1277d9e0dbe1f91336f9f4d37873b2e1c51bc35e29ea3dc349c7c3345071bde48898784eeb08bfc2eea7624249164ef7edc3f834a22ebb", 0xbd}], 0x1, &(0x7f00000004c0)}, 0x4000800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f00000009c0)={0x2, 0x4001, @private=0xa010101}, 0x10, 0x0}, 0x30004040) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000700000000000000ffffffff85100000010000009500000000000000180900002020702500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 9.338984221s ago: executing program 2 (id=3832): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 6.831550633s ago: executing program 5 (id=3833): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 6.54554909s ago: executing program 0 (id=3835): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 6.446348472s ago: executing program 0 (id=3837): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) 3.606830191s ago: executing program 0 (id=3838): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r0) 3.582982443s ago: executing program 2 (id=3839): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000b500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 3.541995664s ago: executing program 5 (id=3840): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 3.485970235s ago: executing program 4 (id=3841): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 3.23914254s ago: executing program 0 (id=3842): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 3.209717642s ago: executing program 4 (id=3843): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000b500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 3.149097103s ago: executing program 2 (id=3844): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.983374047s ago: executing program 4 (id=3845): sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c7a4fac2c72fa1174fe6d97ee657558fb733b911010bc6964aba2458e4dc249d45a30f8783b3262424f30fbd562f78284a40bc1105ac0522e934cd672d817ad030c1ed38040e10f2878ecde283f7fcd1f47fce70540b51c97fd481fbc0960c0649d76a080ba51950bdc7a9edd96b26c2d710a21e6af02166146cf954c7e73b1f3c8ad41145de1277d9e0dbe1f91336f9f4d37873b2e1c51bc35e29ea3dc349c7c3345071bde48898784eeb08bfc2eea7624249164ef7edc3f834a22ebb", 0xbd}], 0x1, &(0x7f00000004c0)}, 0x4000800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f00000009c0)={0x2, 0x4001, @private=0xa010101}, 0x10, 0x0}, 0x30004040) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000700000000000000ffffffff85100000010000009500000000000000180900002020702500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 2.772251912s ago: executing program 4 (id=3846): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000b500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 2.674097325s ago: executing program 4 (id=3847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) 2.551527348s ago: executing program 4 (id=3848): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 308.523213ms ago: executing program 5 (id=3849): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 154.176796ms ago: executing program 0 (id=3850): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r0) 46.612309ms ago: executing program 2 (id=3851): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 0s ago: executing program 0 (id=3852): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x2, 0x200000000000003, 0x106) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000b500000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) kernel console output (not intermixed with test programs): an invalid length. [ 315.637087][T11369] netlink: 'syz.1.1947': attribute type 1 has an invalid length. [ 315.658752][T11369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1947'. [ 315.998397][T11379] netlink: 'syz.2.1951': attribute type 27 has an invalid length. [ 316.458120][T11397] netlink: 'syz.0.1964': attribute type 27 has an invalid length. [ 316.560514][T11399] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1959'. [ 316.738137][T11403] nr0: port 1(hsr0) entered blocking state [ 316.756181][T11403] nr0: port 1(hsr0) entered disabled state [ 316.763050][T11403] hsr0: entered allmulticast mode [ 316.771357][T11403] hsr_slave_0: entered allmulticast mode [ 316.785789][T11403] hsr_slave_1: entered allmulticast mode [ 316.829924][T11403] hsr0: entered promiscuous mode [ 316.912610][T11410] netlink: 'syz.0.1970': attribute type 27 has an invalid length. [ 316.991010][T11413] netlink: 'syz.2.1962': attribute type 21 has an invalid length. [ 317.008837][T11413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1962'. [ 317.098670][T11415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1965'. [ 317.290627][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.297139][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.970371][T11433] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1971'. [ 319.710240][T11454] validate_nla: 4 callbacks suppressed [ 319.710274][T11454] netlink: 'syz.0.1977': attribute type 21 has an invalid length. [ 319.735816][T11454] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 319.743761][T11454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1977'. [ 320.472426][T11474] netlink: 'syz.1.1986': attribute type 21 has an invalid length. [ 320.500758][T11474] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 320.546860][T11474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1986'. [ 321.102763][T11480] netlink: 'syz.2.1988': attribute type 27 has an invalid length. [ 321.656107][T11495] netlink: 'syz.3.1992': attribute type 21 has an invalid length. [ 321.664475][T11495] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 321.745196][T11495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1992'. [ 321.837218][T11497] netlink: 'syz.0.1994': attribute type 2 has an invalid length. [ 321.860854][T11497] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 321.958194][T11497] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1994'. [ 322.076877][T11501] sit0: left promiscuous mode [ 322.634702][T11505] netlink: 'syz.1.1995': attribute type 2 has an invalid length. [ 322.745342][T11505] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1995'. [ 322.958746][T11505] sit0: entered allmulticast mode [ 323.156900][T11516] hsr0: left allmulticast mode [ 323.162109][T11516] hsr_slave_0: left allmulticast mode [ 323.199500][T11516] hsr_slave_1: left allmulticast mode [ 323.215445][T11516] hsr0: left promiscuous mode [ 323.235412][T11516] nr0: port 1(hsr0) entered disabled state [ 323.278891][T11516] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 323.981578][T11531] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2002'. [ 324.387620][T11531] sit0: entered allmulticast mode [ 324.960308][T11542] validate_nla: 5 callbacks suppressed [ 324.960324][T11542] netlink: 'syz.1.2005': attribute type 21 has an invalid length. [ 324.992598][T11542] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 325.015282][T11542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2005'. [ 325.603226][T11557] netlink: 'syz.2.2012': attribute type 2 has an invalid length. [ 325.647681][T11557] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 325.667002][T11557] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2012'. [ 325.699254][T11558] sit0: entered allmulticast mode [ 325.789149][T11560] netlink: 'syz.3.2013': attribute type 21 has an invalid length. [ 325.877806][T11560] netlink: 'syz.3.2013': attribute type 1 has an invalid length. [ 325.929155][T11560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2013'. [ 326.080539][T11565] netlink: 'syz.1.2014': attribute type 27 has an invalid length. [ 326.623367][T11581] netlink: 'syz.0.2028': attribute type 27 has an invalid length. [ 326.809781][T11591] nr0: port 1(hsr0) entered blocking state [ 326.825569][T11591] nr0: port 1(hsr0) entered disabled state [ 326.833664][T11591] hsr0: entered allmulticast mode [ 326.846244][T11591] hsr_slave_0: entered allmulticast mode [ 326.882989][T11591] hsr_slave_1: entered allmulticast mode [ 326.914821][T11591] hsr0: entered promiscuous mode [ 327.556894][T11598] netlink: 'syz.1.2025': attribute type 2 has an invalid length. [ 327.606036][T11598] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 327.660306][T11598] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2025'. [ 327.964899][T11609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2030'. [ 328.400168][T11620] hsr0: left allmulticast mode [ 328.434787][T11620] hsr_slave_0: left allmulticast mode [ 328.441169][T11620] hsr_slave_1: left allmulticast mode [ 328.461136][T11620] hsr0: left promiscuous mode [ 328.480609][T11620] nr0: port 1(hsr0) entered disabled state [ 328.598728][T11620] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 328.736022][T11626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2033'. [ 328.949424][T11628] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2035'. [ 330.997749][T11651] validate_nla: 8 callbacks suppressed [ 330.997766][T11651] netlink: 'syz.0.2054': attribute type 22 has an invalid length. [ 331.030799][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 331.115208][T11653] netlink: 'syz.3.2046': attribute type 2 has an invalid length. [ 331.124036][T11653] netlink: 'syz.3.2046': attribute type 1 has an invalid length. [ 331.225242][T11653] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2046'. [ 331.287035][T11655] netlink: 'syz.1.2047': attribute type 27 has an invalid length. [ 331.848745][T11672] netlink: 'syz.3.2049': attribute type 21 has an invalid length. [ 331.875352][T11672] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 331.883267][T11672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2049'. [ 332.538259][T11688] netlink: 'syz.0.2058': attribute type 22 has an invalid length. [ 332.557883][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 332.581892][T11686] netlink: 'syz.1.2057': attribute type 2 has an invalid length. [ 332.624375][T11686] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 332.655553][T11686] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2057'. [ 333.022343][T11697] netlink: 'syz.2.2067': attribute type 22 has an invalid length. [ 333.061332][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 333.580130][T11714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2065'. [ 334.326392][T11726] nr0: port 1(hsr0) entered blocking state [ 334.333197][T11726] nr0: port 1(hsr0) entered disabled state [ 334.365899][T11726] hsr0: entered allmulticast mode [ 334.371194][T11726] hsr_slave_0: entered allmulticast mode [ 334.387810][T11726] hsr_slave_1: entered allmulticast mode [ 334.410465][T11726] hsr0: entered promiscuous mode [ 334.450240][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 335.133780][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'. [ 336.498409][T11756] validate_nla: 5 callbacks suppressed [ 336.498470][T11756] netlink: 'syz.2.2079': attribute type 2 has an invalid length. [ 336.541542][T11746] netlink: 'syz.1.2076': attribute type 27 has an invalid length. [ 336.638624][T11756] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 336.730484][T11756] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2079'. [ 336.811390][T11759] netlink: 'syz.0.2081': attribute type 2 has an invalid length. [ 336.848263][T11759] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 336.885438][T11759] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2081'. [ 337.067226][T11763] netlink: 'syz.1.2083': attribute type 10 has an invalid length. [ 337.095388][T11763] hsr0: left allmulticast mode [ 337.100627][T11763] hsr_slave_0: left allmulticast mode [ 337.155760][T11763] hsr_slave_1: left allmulticast mode [ 337.161358][T11763] hsr0: left promiscuous mode [ 337.316262][T11763] nr0: port 1(hsr0) entered disabled state [ 337.407127][T11763] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 338.062060][T11777] netlink: 'syz.1.2088': attribute type 22 has an invalid length. [ 338.081737][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'. [ 338.677124][T11786] netlink: 'syz.3.2092': attribute type 27 has an invalid length. [ 338.724843][T11791] netlink: 'syz.0.2094': attribute type 21 has an invalid length. [ 338.765567][T11791] netlink: 'syz.0.2094': attribute type 1 has an invalid length. [ 338.785374][T11791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2094'. [ 338.937257][T11794] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2095'. [ 339.217739][T11799] hsr0: left allmulticast mode [ 339.235110][T11799] hsr_slave_0: left allmulticast mode [ 339.240584][T11799] hsr_slave_1: left allmulticast mode [ 339.262940][T11799] hsr0: left promiscuous mode [ 339.287146][T11799] nr0: port 1(hsr0) entered disabled state [ 339.666172][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 340.308480][T11827] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2106'. [ 340.589204][T11829] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2107'. [ 341.518907][T11845] validate_nla: 9 callbacks suppressed [ 341.519397][T11845] netlink: 'syz.1.2113': attribute type 2 has an invalid length. [ 341.604023][T11845] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 341.668578][T11845] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2113'. [ 342.091822][T11853] netlink: 'syz.2.2115': attribute type 27 has an invalid length. [ 342.175854][T11858] netlink: 'syz.3.2116': attribute type 21 has an invalid length. [ 342.205492][T11858] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 342.228166][T11858] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2116'. [ 342.928369][T11866] netlink: 'syz.3.2117': attribute type 2 has an invalid length. [ 342.949806][T11866] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 342.960931][T11866] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2117'. [ 343.808721][T11880] netlink: 'syz.0.2122': attribute type 2 has an invalid length. [ 343.845549][T11880] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 343.917902][T11880] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2122'. [ 344.522507][T11892] netlink: 'syz.2.2127': attribute type 2 has an invalid length. [ 344.535480][T11892] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2127'. [ 345.593837][T11906] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2132'. [ 350.171507][T11977] validate_nla: 3 callbacks suppressed [ 350.171526][T11977] netlink: 'syz.0.2162': attribute type 10 has an invalid length. [ 350.253399][T11977] hsr0: left allmulticast mode [ 350.295430][T11977] hsr_slave_0: left allmulticast mode [ 350.307127][T11977] hsr_slave_1: left allmulticast mode [ 350.338438][T11977] hsr0: left promiscuous mode [ 350.386442][T11977] nr0: port 1(hsr0) entered disabled state [ 350.537642][T11977] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 357.607804][T12062] netlink: 'syz.3.2189': attribute type 2 has an invalid length. [ 357.670308][T12062] netlink: 'syz.3.2189': attribute type 1 has an invalid length. [ 357.725308][T12062] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2189'. [ 358.355330][T12073] netlink: 'syz.1.2193': attribute type 2 has an invalid length. [ 358.393681][T12073] netlink: 'syz.1.2193': attribute type 1 has an invalid length. [ 358.416202][T12073] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2193'. [ 359.795556][T12095] netlink: 'syz.0.2198': attribute type 2 has an invalid length. [ 359.925178][T12095] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 360.433447][T12095] netlink: 'syz.0.2198': attribute type 27 has an invalid length. [ 361.675313][T12112] netlink: 'syz.0.2210': attribute type 21 has an invalid length. [ 361.765511][T12112] netlink: 'syz.0.2210': attribute type 1 has an invalid length. [ 361.773512][T12112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2210'. [ 363.888497][T12137] netlink: 'syz.0.2208': attribute type 2 has an invalid length. [ 363.977083][T12137] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 364.048465][T12137] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2208'. [ 364.649845][T12145] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 366.618856][T12152] netlink: 'syz.1.2214': attribute type 22 has an invalid length. [ 366.725116][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 366.836831][T12164] netlink: 'syz.3.2216': attribute type 21 has an invalid length. [ 366.847218][T12164] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 366.960234][T12164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2216'. [ 367.611040][T12177] netlink: 'syz.2.2219': attribute type 2 has an invalid length. [ 367.695346][T12177] netlink: 'syz.2.2219': attribute type 1 has an invalid length. [ 367.765221][T12177] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2219'. [ 368.494567][T12195] netlink: 'syz.3.2222': attribute type 2 has an invalid length. [ 368.600151][T12195] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 368.977273][T12201] validate_nla: 1 callbacks suppressed [ 368.977293][T12201] netlink: 'syz.1.2224': attribute type 10 has an invalid length. [ 369.086358][T12201] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 369.804070][T12207] netlink: 'syz.3.2226': attribute type 2 has an invalid length. [ 369.919849][T12207] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 369.976321][T12207] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2226'. [ 370.259698][T12212] netlink: 'syz.1.2229': attribute type 21 has an invalid length. [ 370.320298][T12212] netlink: 'syz.1.2229': attribute type 1 has an invalid length. [ 370.435350][T12212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2229'. [ 371.929230][T12223] netlink: 'syz.0.2231': attribute type 22 has an invalid length. [ 371.980917][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'. [ 372.102285][T12234] netlink: 'syz.1.2235': attribute type 2 has an invalid length. [ 372.254961][T12234] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 372.537804][T12246] netlink: 'syz.0.2245': attribute type 22 has an invalid length. [ 372.568291][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 372.613372][T12238] netlink: 'syz.1.2235': attribute type 27 has an invalid length. [ 373.761509][T12264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2243'. [ 374.661605][T12276] validate_nla: 2 callbacks suppressed [ 374.661644][T12276] netlink: 'syz.0.2249': attribute type 2 has an invalid length. [ 374.726421][T12276] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 374.734763][T12276] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2249'. [ 375.469767][T12285] netlink: 'syz.0.2259': attribute type 10 has an invalid length. [ 375.493136][T12285] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 375.783324][T12289] netlink: 'syz.3.2251': attribute type 2 has an invalid length. [ 375.846042][T12289] netlink: 'syz.3.2251': attribute type 1 has an invalid length. [ 375.996471][T12289] netlink: 'syz.3.2251': attribute type 27 has an invalid length. [ 376.751558][T12310] netlink: 'syz.3.2257': attribute type 21 has an invalid length. [ 376.793075][T12310] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 376.845373][T12310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2257'. [ 377.369062][T12318] netlink: 'syz.1.2262': attribute type 2 has an invalid length. [ 377.415308][T12318] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 377.423946][T12318] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2262'. [ 377.606576][T12322] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2264'. [ 378.661937][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 378.753031][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.759456][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.914731][T12352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2274'. [ 379.438164][T12356] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2276'. [ 379.593198][T12359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2278'. [ 379.792130][T12362] validate_nla: 13 callbacks suppressed [ 379.792204][T12362] netlink: 'syz.0.2277': attribute type 2 has an invalid length. [ 379.885318][T12362] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 379.946769][T12362] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2277'. [ 380.240842][T12368] netlink: 'syz.3.2280': attribute type 21 has an invalid length. [ 380.315523][T12368] netlink: 'syz.3.2280': attribute type 1 has an invalid length. [ 380.323544][T12368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2280'. [ 380.556288][T12375] netlink: 'syz.1.2282': attribute type 21 has an invalid length. [ 380.564595][T12375] netlink: 'syz.1.2282': attribute type 1 has an invalid length. [ 380.696300][T12375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2282'. [ 380.759781][T12374] netlink: 'syz.0.2283': attribute type 21 has an invalid length. [ 380.840231][T12374] netlink: 'syz.0.2283': attribute type 1 has an invalid length. [ 381.477874][T12387] netlink: 'syz.0.2285': attribute type 22 has an invalid length. [ 381.868604][T12393] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 382.700683][T12400] __nla_validate_parse: 2 callbacks suppressed [ 382.700812][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 382.940629][T12404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2290'. [ 383.491472][T12408] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2291'. [ 384.282644][T12416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2295'. [ 384.437453][T12419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2294'. [ 384.756828][T12422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2296'. [ 384.892953][T12425] validate_nla: 11 callbacks suppressed [ 384.893004][T12425] netlink: 'syz.2.2298': attribute type 10 has an invalid length. [ 384.965567][T12425] hsr0: left allmulticast mode [ 384.987288][T12425] hsr_slave_0: left allmulticast mode [ 385.015222][T12425] hsr_slave_1: left allmulticast mode [ 385.025785][T12425] hsr0: left promiscuous mode [ 385.054808][T12425] nr0: port 1(hsr0) entered disabled state [ 385.213432][T12425] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 385.267617][T12433] netlink: 'syz.3.2299': attribute type 2 has an invalid length. [ 385.326324][T12433] netlink: 'syz.3.2299': attribute type 1 has an invalid length. [ 385.525527][T12433] netlink: 'syz.3.2299': attribute type 27 has an invalid length. [ 386.260331][T12443] netlink: 'syz.2.2310': attribute type 2 has an invalid length. [ 386.279805][T12439] netlink: 'syz.0.2300': attribute type 22 has an invalid length. [ 386.301514][T12443] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 386.354910][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'. [ 386.535713][T12443] netlink: 'syz.2.2310': attribute type 27 has an invalid length. [ 387.144024][T12449] netlink: 'syz.1.2304': attribute type 2 has an invalid length. [ 387.256207][T12449] netlink: 'syz.1.2304': attribute type 1 has an invalid length. [ 387.317145][T12449] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2304'. [ 387.436356][T12451] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2303'. [ 388.642216][T12464] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2308'. [ 389.350687][T12470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2309'. [ 389.514124][T12471] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 389.705647][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2312'. [ 390.286247][T12483] validate_nla: 11 callbacks suppressed [ 390.286327][T12483] netlink: 'syz.3.2315': attribute type 2 has an invalid length. [ 390.345276][T12483] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 390.353954][T12483] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2315'. [ 390.434195][T12486] netlink: 'syz.1.2316': attribute type 21 has an invalid length. [ 390.535614][T12486] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 390.543662][T12486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2316'. [ 390.560702][T12488] netlink: 'syz.2.2317': attribute type 2 has an invalid length. [ 390.609931][T12488] netlink: 'syz.2.2317': attribute type 1 has an invalid length. [ 390.682151][T12488] netlink: 'syz.2.2317': attribute type 27 has an invalid length. [ 390.692197][T12496] netlink: 'syz.3.2318': attribute type 2 has an invalid length. [ 390.725609][T12496] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 390.733971][T12496] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2318'. [ 391.619510][T12509] netlink: 'syz.1.2322': attribute type 21 has an invalid length. [ 391.655920][T12509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2322'. [ 393.437418][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 394.163135][T12521] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2328'. [ 394.609124][T12532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2332'. [ 394.624446][T12530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2331'. [ 395.691008][T12553] validate_nla: 11 callbacks suppressed [ 395.691064][T12553] netlink: 'syz.0.2337': attribute type 21 has an invalid length. [ 395.729011][T12553] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 395.758645][T12553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2337'. [ 398.692154][T12570] netlink: 'syz.3.2341': attribute type 2 has an invalid length. [ 398.736768][T12570] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 398.915581][T12568] netlink: 'syz.3.2341': attribute type 27 has an invalid length. [ 398.988926][T12574] netlink: 'syz.2.2342': attribute type 21 has an invalid length. [ 399.015466][T12574] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 399.023442][T12574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2342'. [ 399.437366][T12580] netlink: 'syz.2.2343': attribute type 21 has an invalid length. [ 399.467949][T12580] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 399.514199][T12580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2343'. [ 401.135931][T12606] netlink: 'syz.3.2352': attribute type 2 has an invalid length. [ 401.172196][T12606] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 401.273093][T12604] netlink: 'syz.3.2352': attribute type 27 has an invalid length. [ 402.347236][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.357239][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.367515][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.376551][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.384455][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 402.392529][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.494289][T12627] chnl_net:caif_netlink_parms(): no params data found [ 403.702991][T12627] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.710395][T12627] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.718406][T12627] bridge_slave_0: entered allmulticast mode [ 403.725927][T12627] bridge_slave_0: entered promiscuous mode [ 403.751439][T12627] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.764899][T12627] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.780309][T12627] bridge_slave_1: entered allmulticast mode [ 403.791621][T12627] bridge_slave_1: entered promiscuous mode [ 403.887172][T12648] netlink: 'syz.3.2366': attribute type 2 has an invalid length. [ 403.897771][T12627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.915747][T12648] netlink: 'syz.3.2366': attribute type 1 has an invalid length. [ 403.978899][T12627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.030722][T12646] netlink: 'syz.3.2366': attribute type 27 has an invalid length. [ 404.059706][T12627] team0: Port device team_slave_0 added [ 404.485470][ T5781] Bluetooth: hci0: command tx timeout [ 406.565145][ T5781] Bluetooth: hci0: command tx timeout [ 407.077593][T12627] team0: Port device team_slave_1 added [ 407.181315][T12627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.198548][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.229530][T12627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.256312][T12627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.264072][T12627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.292594][T12627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.404415][ T2965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.522222][T12627] hsr_slave_0: entered promiscuous mode [ 407.550915][T12627] hsr_slave_1: entered promiscuous mode [ 407.575241][T12627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.594888][T12627] Cannot create hsr debugfs directory [ 407.623794][ T2965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.752240][ T2965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.817936][T12678] netlink: 'syz.3.2376': attribute type 2 has an invalid length. [ 407.831436][T12678] netlink: 'syz.3.2376': attribute type 1 has an invalid length. [ 407.833918][ T2965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.902493][T12675] netlink: 'syz.3.2376': attribute type 27 has an invalid length. [ 408.645692][ T5781] Bluetooth: hci0: command tx timeout [ 410.725277][ T51] Bluetooth: hci0: command tx timeout [ 412.001637][T12721] netlink: 'syz.2.2380': attribute type 21 has an invalid length. [ 412.026655][T12721] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 412.034794][T12721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2380'. [ 412.081846][T12627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.110488][T12627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 412.138095][T12627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 412.160384][T12627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.343797][T12733] netlink: 'syz.2.2385': attribute type 2 has an invalid length. [ 412.385657][T12733] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 412.499155][T12735] netlink: 'syz.1.2386': attribute type 22 has an invalid length. [ 412.509912][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 412.542772][T12733] netlink: 'syz.2.2385': attribute type 27 has an invalid length. [ 412.723911][ T2965] hsr_slave_0: left promiscuous mode [ 412.733891][ T2965] hsr_slave_1: left promiscuous mode [ 412.759505][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.770455][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.781713][ T2965] bridge_slave_1: left allmulticast mode [ 412.791765][ T2965] bridge_slave_1: left promiscuous mode [ 412.800223][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.816961][ T2965] bridge_slave_0: left allmulticast mode [ 412.822761][ T2965] bridge_slave_0: left promiscuous mode [ 412.833080][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.861939][ T2965] veth1_vlan: left promiscuous mode [ 412.867904][ T2965] veth0_vlan: left promiscuous mode [ 413.460432][ T2965] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 413.498763][ T2965] team0 (unregistering): Port device team_slave_1 removed [ 413.535979][ T2965] team0 (unregistering): Port device team_slave_0 removed [ 413.572122][ T2965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.814806][ T2965] bond0 (unregistering): Released all slaves [ 413.921429][T12627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.954740][T12627] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.990281][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.997431][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.028949][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.036197][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.192515][T12746] netlink: 'syz.2.2390': attribute type 2 has an invalid length. [ 414.214397][T12746] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 414.228123][T12746] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2390'. [ 414.407468][T12627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.448800][T12627] veth0_vlan: entered promiscuous mode [ 414.479512][T12627] veth1_vlan: entered promiscuous mode [ 414.518238][T12627] veth0_macvtap: entered promiscuous mode [ 414.529787][T12627] veth1_macvtap: entered promiscuous mode [ 414.554742][T12627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.588889][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.602031][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.612448][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.623383][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.634371][T12627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.645964][T12627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.657796][T12627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.688512][T12627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.698730][T12627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.708882][T12627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.722249][T12627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.074768][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.096770][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.130705][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.150613][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.814078][T12775] netlink: 'syz.1.2396': attribute type 2 has an invalid length. [ 415.832535][T12775] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 415.884718][T12772] netlink: 'syz.1.2396': attribute type 27 has an invalid length. [ 416.486120][T12787] netlink: 'syz.1.2406': attribute type 2 has an invalid length. [ 416.497011][T12787] netlink: 'syz.1.2406': attribute type 1 has an invalid length. [ 416.559682][T12782] netlink: 'syz.1.2406': attribute type 27 has an invalid length. [ 416.700494][T12791] netlink: 'syz.1.2400': attribute type 2 has an invalid length. [ 416.709462][T12791] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 416.728866][T12791] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2400'. [ 416.932750][T12795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2402'. [ 418.255201][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.264626][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.281987][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.296099][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.303843][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 418.311317][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.528674][ T2992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.602074][ T2992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.621485][T12811] chnl_net:caif_netlink_parms(): no params data found [ 418.667460][ T2992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.703658][T12811] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.711208][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.718497][T12811] bridge_slave_0: entered allmulticast mode [ 418.730065][T12811] bridge_slave_0: entered promiscuous mode [ 418.747565][ T2992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.761215][T12811] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.768894][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.776396][T12811] bridge_slave_1: entered allmulticast mode [ 418.783191][T12811] bridge_slave_1: entered promiscuous mode [ 418.813050][T12811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.827171][T12811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.864650][T12811] team0: Port device team_slave_0 added [ 418.874520][T12811] team0: Port device team_slave_1 added [ 418.938194][T12811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.949501][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.976345][T12811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.989281][T12811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.996716][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.023035][T12811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.101373][T12811] hsr_slave_0: entered promiscuous mode [ 419.108389][T12811] hsr_slave_1: entered promiscuous mode [ 419.114424][T12811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.122331][T12811] Cannot create hsr debugfs directory [ 419.918658][T12811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.934763][T12811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.975933][T12811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.987904][T12811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.155845][ T2992] hsr_slave_0: left promiscuous mode [ 420.164023][ T2992] hsr_slave_1: left promiscuous mode [ 420.172684][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.187982][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.198453][ T2992] veth1_to_hsr: left allmulticast mode [ 420.203962][ T2992] veth1_to_hsr: left promiscuous mode [ 420.214075][ T2992] bridge0: port 3(veth1_to_hsr) entered disabled state [ 420.229263][ T2992] bridge_slave_1: left allmulticast mode [ 420.238352][ T2992] bridge_slave_1: left promiscuous mode [ 420.244199][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.259866][ T2992] bridge_slave_0: left allmulticast mode [ 420.266725][ T2992] bridge_slave_0: left promiscuous mode [ 420.272419][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.292562][ T2992] veth1_vlan: left promiscuous mode [ 420.298634][ T2992] veth0_vlan: left promiscuous mode [ 420.405575][ T51] Bluetooth: hci2: command tx timeout [ 420.719333][ T2992] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 420.804448][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.036864][ T2992] bond0 (unregistering): Released all slaves [ 421.123355][T12811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.154959][T12811] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.177374][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.184575][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.207720][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.214930][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.704415][T12811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.826568][T12811] veth0_vlan: entered promiscuous mode [ 421.853447][T12811] veth1_vlan: entered promiscuous mode [ 421.916664][T12811] veth0_macvtap: entered promiscuous mode [ 421.928511][T12811] veth1_macvtap: entered promiscuous mode [ 421.954924][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.975136][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.996761][T12811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.032135][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.044905][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.061690][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.072486][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.085293][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.100260][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.113163][T12811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.124585][T12811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.134092][T12811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.143425][T12811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.152454][T12811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.273379][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.283408][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.331493][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.340568][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.486090][ T51] Bluetooth: hci2: command tx timeout [ 424.565153][ T51] Bluetooth: hci2: command tx timeout [ 425.229253][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.241090][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.249827][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.258972][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.266887][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 425.276822][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.974785][T12894] chnl_net:caif_netlink_parms(): no params data found [ 426.040854][T12894] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.048956][T12894] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.056365][T12894] bridge_slave_0: entered allmulticast mode [ 426.063095][T12894] bridge_slave_0: entered promiscuous mode [ 426.073755][T12894] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.083238][T12894] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.092056][T12894] bridge_slave_1: entered allmulticast mode [ 426.101662][T12894] bridge_slave_1: entered promiscuous mode [ 426.129175][T12894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.140298][T12894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.169794][T12894] team0: Port device team_slave_0 added [ 426.180256][T12894] team0: Port device team_slave_1 added [ 426.205130][T12894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.212170][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.240772][T12894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.255627][T12894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.262598][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.289046][T12894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.329033][T12894] hsr_slave_0: entered promiscuous mode [ 426.335876][T12894] hsr_slave_1: entered promiscuous mode [ 426.341972][T12894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.349729][T12894] Cannot create hsr debugfs directory [ 426.453102][T12894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.524126][T12894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.589444][T12894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.629940][T12894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.657390][ T5781] Bluetooth: hci2: command tx timeout [ 426.801861][T12894] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.812232][T12894] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.822217][T12894] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.833173][T12894] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.924797][T12894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.944729][T12894] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.971147][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.978343][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.997375][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.004594][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.219241][T12894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.261056][T12894] veth0_vlan: entered promiscuous mode [ 427.288264][T12894] veth1_vlan: entered promiscuous mode [ 427.316882][T12894] veth0_macvtap: entered promiscuous mode [ 427.343961][T12894] veth1_macvtap: entered promiscuous mode [ 427.358998][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.370442][ T5781] Bluetooth: hci1: command tx timeout [ 427.376908][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.386851][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.398623][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.410538][T12894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.444828][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.456917][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.468094][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.478839][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.488736][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.499331][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.509211][T12894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.519809][T12894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.531792][T12894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.544517][T12894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.553455][T12894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.562522][T12894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.572364][T12894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.700254][ T2939] hsr_slave_0: left promiscuous mode [ 427.707507][ T2939] hsr_slave_1: left promiscuous mode [ 427.713358][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.721016][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.729097][ T2939] bridge_slave_1: left allmulticast mode [ 427.734766][ T2939] bridge_slave_1: left promiscuous mode [ 427.741492][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.751458][ T2939] bridge_slave_0: left allmulticast mode [ 427.757279][ T2939] bridge_slave_0: left promiscuous mode [ 427.764248][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.873184][ T2939] veth1_vlan: left promiscuous mode [ 427.881082][ T2939] veth0_vlan: left promiscuous mode [ 428.944464][ T2939] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 428.982932][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 429.019090][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 429.058719][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.317682][ T2939] bond0 (unregistering): Released all slaves [ 429.418183][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.433601][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.449587][ T5781] Bluetooth: hci1: command tx timeout [ 429.486818][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.510919][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.792413][T12927] validate_nla: 5 callbacks suppressed [ 429.792435][T12927] netlink: 'syz.2.2423': attribute type 21 has an invalid length. [ 429.808959][T12927] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 429.816909][T12927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2423'. [ 431.525804][ T5781] Bluetooth: hci1: command tx timeout [ 433.615312][ T5781] Bluetooth: hci1: command tx timeout [ 434.055233][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.063096][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.071579][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.082480][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.090539][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 434.099441][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.248080][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.273603][T12967] chnl_net:caif_netlink_parms(): no params data found [ 434.322252][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.362620][T12967] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.369910][T12967] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.377149][T12967] bridge_slave_0: entered allmulticast mode [ 434.384107][T12967] bridge_slave_0: entered promiscuous mode [ 434.409659][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.425369][T12967] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.432564][T12967] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.439933][T12967] bridge_slave_1: entered allmulticast mode [ 434.447449][T12967] bridge_slave_1: entered promiscuous mode [ 434.473749][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.500136][T12967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.514028][T12967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.547679][T12967] team0: Port device team_slave_0 added [ 434.557923][T12967] team0: Port device team_slave_1 added [ 434.587970][T12967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.594945][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.621477][T12967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.633941][T12967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.641040][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.667703][T12967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.753306][T12967] hsr_slave_0: entered promiscuous mode [ 434.760225][T12967] hsr_slave_1: entered promiscuous mode [ 434.766677][T12967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.774369][T12967] Cannot create hsr debugfs directory [ 435.596287][T12967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.619030][T12967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.651137][T12967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.702555][T12967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.749227][ T42] hsr_slave_0: left promiscuous mode [ 435.756117][ T42] hsr_slave_1: left promiscuous mode [ 435.762045][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.774178][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.783277][ T42] bridge_slave_1: left allmulticast mode [ 435.789414][ T42] bridge_slave_1: left promiscuous mode [ 435.795609][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.804796][ T42] bridge_slave_0: left allmulticast mode [ 435.811016][ T42] bridge_slave_0: left promiscuous mode [ 435.818180][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.844526][ T42] veth1_vlan: left promiscuous mode [ 435.851147][ T42] veth0_vlan: left promiscuous mode [ 436.165247][ T5781] Bluetooth: hci3: command tx timeout [ 436.676557][ T42] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 436.714496][ T42] team0 (unregistering): Port device team_slave_1 removed [ 436.759139][ T42] team0 (unregistering): Port device team_slave_0 removed [ 436.794616][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.261493][ T42] bond0 (unregistering): Released all slaves [ 437.614791][T12967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.653987][T12967] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.700562][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.707773][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.726216][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.733408][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.082241][T12967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.187411][T12967] veth0_vlan: entered promiscuous mode [ 438.200773][T12967] veth1_vlan: entered promiscuous mode [ 438.245539][ T5781] Bluetooth: hci3: command tx timeout [ 438.263971][T12967] veth0_macvtap: entered promiscuous mode [ 438.284893][T12967] veth1_macvtap: entered promiscuous mode [ 438.307137][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.317805][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.335752][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.353211][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.368510][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.379901][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.396734][T12967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.421972][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.433249][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.445984][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.457788][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.468139][T12967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.479067][T12967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.492502][T12967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.508016][T12967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.517106][T12967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.527509][T12967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.536921][T12967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.621159][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.639457][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.679561][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.690176][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.167837][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.174334][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.325168][ T5781] Bluetooth: hci3: command tx timeout [ 441.400062][T13034] netlink: 'syz.2.2443': attribute type 21 has an invalid length. [ 441.408299][T13034] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 441.416871][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2443'. [ 442.407489][ T5781] Bluetooth: hci3: command tx timeout [ 442.479378][T13042] netlink: 'syz.3.2446': attribute type 21 has an invalid length. [ 442.497378][T13042] netlink: 'syz.3.2446': attribute type 1 has an invalid length. [ 442.507158][T13042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2446'. [ 443.722714][T13049] netlink: 'syz.0.2450': attribute type 21 has an invalid length. [ 443.745580][T13049] netlink: 'syz.0.2450': attribute type 1 has an invalid length. [ 443.753563][T13049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2450'. [ 443.790097][T13055] netlink: 'syz.3.2449': attribute type 2 has an invalid length. [ 443.845410][T13055] netlink: 'syz.3.2449': attribute type 1 has an invalid length. [ 444.136043][ C0] Illegal XDP return value 16128 on prog (id 849) dev bond_slave_1, expect packet loss! [ 446.707098][T13055] netlink: 'syz.3.2449': attribute type 27 has an invalid length. [ 446.761658][T13055] bond0: (slave bond_slave_0): Releasing backup interface [ 447.109755][T13068] netlink: 'syz.3.2453': attribute type 21 has an invalid length. [ 447.137021][T13068] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 447.195747][T13068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2453'. [ 449.612162][T13085] netlink: 'syz.2.2458': attribute type 21 has an invalid length. [ 449.622256][T13085] netlink: 'syz.2.2458': attribute type 1 has an invalid length. [ 449.634981][T13085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2458'. [ 450.035805][T13097] netlink: 'syz.3.2462': attribute type 2 has an invalid length. [ 450.065088][T13097] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 452.602254][T13095] netlink: 'syz.3.2462': attribute type 27 has an invalid length. [ 453.023620][T13111] netlink: 'syz.3.2466': attribute type 21 has an invalid length. [ 453.037441][T13111] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 453.052373][T13111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2466'. [ 453.699456][T13122] netlink: 'syz.3.2469': attribute type 21 has an invalid length. [ 453.730675][T13122] netlink: 'syz.3.2469': attribute type 1 has an invalid length. [ 453.761966][T13122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2469'. [ 454.400207][T13139] netlink: 'syz.0.2474': attribute type 2 has an invalid length. [ 454.423800][T13139] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 454.534075][T13143] netlink: 'syz.0.2474': attribute type 27 has an invalid length. [ 454.645510][T13143] bond0: (slave bond_slave_0): Releasing backup interface [ 455.064958][T13151] netlink: 'syz.2.2478': attribute type 21 has an invalid length. [ 455.120802][T13151] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 455.168486][T13151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2478'. [ 457.726109][T13180] netlink: 'syz.0.2487': attribute type 2 has an invalid length. [ 457.851066][T13180] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 458.717303][T13180] netlink: 'syz.0.2487': attribute type 27 has an invalid length. [ 461.860714][T13198] netlink: 'syz.3.2495': attribute type 21 has an invalid length. [ 461.881985][T13198] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 461.910398][T13198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2495'. [ 462.871108][T13224] netlink: 'syz.0.2502': attribute type 2 has an invalid length. [ 462.918553][T13224] netlink: 'syz.0.2502': attribute type 1 has an invalid length. [ 463.577191][T13227] netlink: 'syz.0.2502': attribute type 27 has an invalid length. [ 463.991458][T13239] netlink: 'syz.2.2510': attribute type 21 has an invalid length. [ 464.014796][T13239] netlink: 'syz.2.2510': attribute type 1 has an invalid length. [ 464.050523][T13239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2510'. [ 467.340921][T13267] netlink: 'syz.2.2518': attribute type 2 has an invalid length. [ 467.435297][T13267] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 470.165267][T13267] netlink: 'syz.2.2518': attribute type 27 has an invalid length. [ 470.380907][T13267] bond0: (slave bond_slave_0): Releasing backup interface [ 472.206510][T13310] netlink: 'syz.3.2532': attribute type 2 has an invalid length. [ 472.231750][T13310] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 472.295609][T13310] netlink: 'syz.3.2532': attribute type 27 has an invalid length. [ 476.342885][T13348] netlink: 'syz.0.2542': attribute type 10 has an invalid length. [ 476.372773][T13348] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 476.737456][T13364] netlink: 'syz.0.2548': attribute type 2 has an invalid length. [ 476.757508][T13364] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 479.385745][T13360] netlink: 'syz.0.2548': attribute type 27 has an invalid length. [ 480.059976][T13387] netlink: 'syz.0.2562': attribute type 2 has an invalid length. [ 480.078712][T13387] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 483.043915][T13387] netlink: 'syz.0.2562': attribute type 27 has an invalid length. [ 484.090335][T13408] netlink: 'syz.0.2561': attribute type 21 has an invalid length. [ 484.125352][T13408] netlink: 'syz.0.2561': attribute type 1 has an invalid length. [ 484.133365][T13408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2561'. [ 486.406412][T13428] netlink: 'syz.2.2568': attribute type 21 has an invalid length. [ 486.430481][T13428] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 486.445097][T13428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2568'. [ 487.180539][T13446] netlink: 'syz.1.2572': attribute type 21 has an invalid length. [ 487.199495][T13446] netlink: 'syz.1.2572': attribute type 1 has an invalid length. [ 487.220579][T13446] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2572'. [ 487.627219][T13454] netlink: 'syz.1.2574': attribute type 22 has an invalid length. [ 487.639185][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'. [ 488.017495][T13458] netlink: 'syz.1.2576': attribute type 2 has an invalid length. [ 488.025507][T13458] netlink: 'syz.1.2576': attribute type 1 has an invalid length. [ 488.067193][T13458] netlink: 'syz.1.2576': attribute type 27 has an invalid length. [ 488.186835][T13458] bond0: (slave bond_slave_0): Releasing backup interface [ 490.203958][T13480] netlink: 'syz.1.2583': attribute type 22 has an invalid length. [ 490.245133][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 490.422426][T13492] netlink: 'syz.2.2586': attribute type 2 has an invalid length. [ 490.451804][T13492] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 490.876150][T13492] netlink: 'syz.2.2586': attribute type 27 has an invalid length. [ 491.307958][T13516] netlink: 'syz.2.2595': attribute type 22 has an invalid length. [ 491.317389][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 492.298796][T13539] netlink: 'syz.3.2603': attribute type 2 has an invalid length. [ 492.306878][T13539] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 492.345846][T13539] netlink: 'syz.3.2603': attribute type 27 has an invalid length. [ 492.479060][T13542] netlink: 'syz.2.2604': attribute type 22 has an invalid length. [ 492.487896][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'. [ 495.780747][T13569] netlink: 'syz.1.2613': attribute type 2 has an invalid length. [ 495.798838][T13565] netlink: 'syz.0.2612': attribute type 21 has an invalid length. [ 495.809670][T13569] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 495.926598][T13565] netlink: 'syz.0.2612': attribute type 1 has an invalid length. [ 495.934585][T13565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2612'. [ 496.264047][T13569] netlink: 'syz.1.2613': attribute type 27 has an invalid length. [ 496.418758][T13586] netlink: 'syz.0.2615': attribute type 22 has an invalid length. [ 496.427178][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 500.153493][T13609] netlink: 'syz.2.2624': attribute type 21 has an invalid length. [ 500.165568][T13609] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 500.173509][T13609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2624'. [ 500.223146][T13614] netlink: 'syz.3.2625': attribute type 2 has an invalid length. [ 500.231694][T13614] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 501.206415][T13617] netlink: 'syz.3.2625': attribute type 27 has an invalid length. [ 501.805077][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.811717][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.362835][T13629] netlink: 'syz.0.2629': attribute type 22 has an invalid length. [ 502.373062][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 505.899436][T13663] netlink: 'syz.3.2636': attribute type 2 has an invalid length. [ 505.918282][T13663] netlink: 'syz.3.2636': attribute type 1 has an invalid length. [ 505.967612][T13662] netlink: 'syz.1.2635': attribute type 21 has an invalid length. [ 506.011920][T13662] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 506.039922][T13662] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2635'. [ 506.125956][T13668] netlink: 'syz.0.2638': attribute type 22 has an invalid length. [ 506.134334][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2638'. [ 506.149282][T13663] netlink: 'syz.3.2636': attribute type 27 has an invalid length. [ 506.603075][T13676] netlink: 'syz.0.2650': attribute type 22 has an invalid length. [ 506.626262][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 510.493899][T13704] netlink: 'syz.3.2651': attribute type 2 has an invalid length. [ 510.514747][T13704] netlink: 'syz.3.2651': attribute type 1 has an invalid length. [ 510.562743][T13703] netlink: 'syz.0.2653': attribute type 22 has an invalid length. [ 510.578573][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 510.604415][T13698] netlink: 'syz.3.2651': attribute type 27 has an invalid length. [ 514.110379][T13734] netlink: 'syz.0.2663': attribute type 22 has an invalid length. [ 514.119102][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 514.374965][T13745] netlink: 'syz.3.2666': attribute type 2 has an invalid length. [ 514.386464][T13745] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 514.439509][T13740] netlink: 'syz.3.2666': attribute type 27 has an invalid length. [ 514.845793][T13759] netlink: 'syz.1.2678': attribute type 2 has an invalid length. [ 514.853575][T13759] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 514.923450][T13756] netlink: 'syz.1.2678': attribute type 27 has an invalid length. [ 515.068936][T13770] netlink: 'syz.0.2681': attribute type 2 has an invalid length. [ 515.079671][T13770] netlink: 'syz.0.2681': attribute type 1 has an invalid length. [ 515.124679][T13765] netlink: 'syz.0.2681': attribute type 27 has an invalid length. [ 518.000485][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 519.124153][T13816] validate_nla: 6 callbacks suppressed [ 519.124175][T13816] netlink: 'syz.1.2694': attribute type 27 has an invalid length. [ 521.707258][T13820] netlink: 'syz.1.2696': attribute type 2 has an invalid length. [ 521.717203][T13820] netlink: 'syz.1.2696': attribute type 1 has an invalid length. [ 521.734364][T13820] netlink: 'syz.1.2696': attribute type 27 has an invalid length. [ 522.242971][T13839] netlink: 'syz.1.2692': attribute type 22 has an invalid length. [ 522.251844][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2692'. [ 525.277387][T13855] netlink: 'syz.3.2698': attribute type 2 has an invalid length. [ 525.305659][T13855] netlink: 'syz.3.2698': attribute type 1 has an invalid length. [ 525.412780][T13853] netlink: 'syz.3.2698': attribute type 27 has an invalid length. [ 525.600420][T13871] netlink: 'syz.2.2710': attribute type 2 has an invalid length. [ 525.621718][T13871] netlink: 'syz.2.2710': attribute type 1 has an invalid length. [ 525.652214][T13866] netlink: 'syz.2.2710': attribute type 27 has an invalid length. [ 525.778504][T13875] netlink: 'syz.2.2704': attribute type 22 has an invalid length. [ 525.791504][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'. [ 529.201761][T13897] netlink: 'syz.1.2713': attribute type 2 has an invalid length. [ 529.221498][T13897] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 529.264835][T13897] netlink: 'syz.1.2713': attribute type 27 has an invalid length. [ 529.286594][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 529.434309][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 532.766749][T13931] validate_nla: 1 callbacks suppressed [ 532.766763][T13931] netlink: 'syz.3.2724': attribute type 2 has an invalid length. [ 532.795139][T13931] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 532.841642][T13931] netlink: 'syz.3.2724': attribute type 27 has an invalid length. [ 533.056669][T13939] netlink: 'syz.3.2728': attribute type 22 has an invalid length. [ 533.078876][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2728'. [ 536.464574][T13961] netlink: 'syz.0.2736': attribute type 2 has an invalid length. [ 536.484096][T13961] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 536.520080][T13963] netlink: 'syz.3.2737': attribute type 21 has an invalid length. [ 536.570238][T13963] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 536.579836][T13963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2737'. [ 536.600390][T13961] netlink: 'syz.0.2736': attribute type 27 has an invalid length. [ 536.982987][T13974] netlink: 'syz.0.2739': attribute type 22 has an invalid length. [ 536.997858][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'. [ 540.577022][T13997] netlink: 'syz.2.2747': attribute type 2 has an invalid length. [ 540.605218][T13997] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 540.650149][T13997] netlink: 'syz.2.2747': attribute type 27 has an invalid length. [ 540.748668][T14000] netlink: 'syz.1.2749': attribute type 22 has an invalid length. [ 540.775181][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 541.127103][T14007] netlink: 'syz.2.2753': attribute type 21 has an invalid length. [ 541.175588][T14007] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 541.210243][T14007] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2753'. [ 541.255558][T14009] netlink: 'syz.1.2752': attribute type 21 has an invalid length. [ 541.264916][T14009] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 541.290705][T14009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2752'. [ 544.646707][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 544.698165][T14039] netlink: 'syz.0.2760': attribute type 2 has an invalid length. [ 544.737596][T14039] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 545.036722][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'. [ 545.643226][T14055] validate_nla: 2 callbacks suppressed [ 545.643276][T14055] netlink: 'syz.2.2764': attribute type 21 has an invalid length. [ 545.657803][T14055] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 545.666058][T14055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2764'. [ 545.699916][T14056] netlink: 'syz.1.2773': attribute type 22 has an invalid length. [ 545.725147][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 545.909732][T14060] netlink: 'syz.0.2765': attribute type 21 has an invalid length. [ 545.936256][T14060] netlink: 'syz.0.2765': attribute type 1 has an invalid length. [ 545.944515][T14060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2765'. [ 549.191858][T14077] netlink: 'syz.1.2771': attribute type 2 has an invalid length. [ 549.212615][T14077] netlink: 'syz.1.2771': attribute type 1 has an invalid length. [ 549.241393][T14079] netlink: 'syz.3.2775': attribute type 21 has an invalid length. [ 549.266835][T14079] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 549.302574][T14079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2775'. [ 549.361257][T14077] netlink: 'syz.1.2771': attribute type 27 has an invalid length. [ 549.620351][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'. [ 549.772856][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 552.226747][T14112] validate_nla: 1 callbacks suppressed [ 552.226763][T14112] netlink: 'syz.3.2785': attribute type 2 has an invalid length. [ 552.272873][T14112] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 552.441623][T14112] netlink: 'syz.3.2785': attribute type 27 has an invalid length. [ 552.694058][T14118] netlink: 'syz.3.2786': attribute type 21 has an invalid length. [ 552.722682][T14118] netlink: 'syz.3.2786': attribute type 1 has an invalid length. [ 552.752832][T14118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2786'. [ 552.863263][T14122] netlink: 'syz.1.2787': attribute type 22 has an invalid length. [ 552.895538][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 556.607455][T14148] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 556.622257][T14148] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 556.660629][T14147] netlink: 'syz.2.2795': attribute type 21 has an invalid length. [ 556.697499][T14147] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 556.736464][T14147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2795'. [ 556.980004][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2796'. [ 560.008399][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 560.629826][T14196] validate_nla: 2 callbacks suppressed [ 560.629842][T14196] netlink: 'syz.0.2806': attribute type 2 has an invalid length. [ 560.673180][T14196] netlink: 'syz.0.2806': attribute type 1 has an invalid length. [ 560.985682][T14196] netlink: 'syz.0.2806': attribute type 27 has an invalid length. [ 561.307104][T14208] netlink: 'syz.1.2809': attribute type 22 has an invalid length. [ 561.315712][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 561.332142][T14210] netlink: 'syz.0.2810': attribute type 21 has an invalid length. [ 561.375557][T14210] netlink: 'syz.0.2810': attribute type 1 has an invalid length. [ 561.387908][T14210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2810'. [ 563.058898][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.075150][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.595115][T14223] netlink: 'syz.1.2821': attribute type 22 has an invalid length. [ 564.615203][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 565.105552][T14235] netlink: 'syz.3.2818': attribute type 2 has an invalid length. [ 565.113341][T14235] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 565.180248][T14231] netlink: 'syz.3.2818': attribute type 27 has an invalid length. [ 570.922426][T14262] netlink: 'syz.3.2824': attribute type 22 has an invalid length. [ 570.935302][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2824'. [ 571.575095][T14276] netlink: 'syz.3.2828': attribute type 2 has an invalid length. [ 571.582881][T14276] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 574.544973][T14276] netlink: 'syz.3.2828': attribute type 27 has an invalid length. [ 577.814496][T14298] netlink: 'syz.0.2834': attribute type 22 has an invalid length. [ 577.825751][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'. [ 581.303082][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 581.312080][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 581.319799][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 581.330199][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 581.344023][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 581.351675][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.445183][ T51] Bluetooth: hci4: command tx timeout [ 583.999045][T14327] netlink: 'syz.2.2845': attribute type 22 has an invalid length. [ 584.061956][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2845'. [ 584.324688][T14338] netlink: 'syz.0.2848': attribute type 21 has an invalid length. [ 584.340352][T14338] netlink: 'syz.0.2848': attribute type 1 has an invalid length. [ 584.348878][T14338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2848'. [ 585.019456][T14328] chnl_net:caif_netlink_parms(): no params data found [ 585.334227][T14328] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.355376][T14328] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.362628][T14328] bridge_slave_0: entered allmulticast mode [ 585.399484][T14328] bridge_slave_0: entered promiscuous mode [ 585.421710][T14328] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.442521][T14328] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.459061][T14328] bridge_slave_1: entered allmulticast mode [ 585.476944][T14328] bridge_slave_1: entered promiscuous mode [ 585.525193][ T51] Bluetooth: hci4: command tx timeout [ 585.736751][T14328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.829938][T14328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.726999][T14328] team0: Port device team_slave_0 added [ 586.783640][T14328] team0: Port device team_slave_1 added [ 586.875241][T14378] netlink: 'syz.2.2856': attribute type 22 has an invalid length. [ 586.883120][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2856'. [ 586.979441][T14328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.015267][T14328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.071819][T14328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.093602][T14328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.101218][T14328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.137640][T14328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.620046][ T51] Bluetooth: hci4: command tx timeout [ 587.704925][T14328] hsr_slave_0: entered promiscuous mode [ 589.685212][ T51] Bluetooth: hci4: command tx timeout [ 590.326117][T14328] hsr_slave_1: entered promiscuous mode [ 590.764627][ T2965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.878562][T14399] netlink: 'syz.2.2866': attribute type 22 has an invalid length. [ 590.895177][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 591.109505][ T2965] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.199863][ T2965] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.296287][ T2965] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.351496][T14410] sit0: entered allmulticast mode [ 591.445296][T14328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 591.463226][T14328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 591.487527][T14328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 591.552962][T14328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 591.865438][T14328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.934906][T14328] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.968394][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.975607][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.038178][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.045427][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.623166][T14328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.046704][T14328] veth0_vlan: entered promiscuous mode [ 593.073885][T14328] veth1_vlan: entered promiscuous mode [ 593.143193][T14328] veth0_macvtap: entered promiscuous mode [ 593.169755][T14328] veth1_macvtap: entered promiscuous mode [ 593.208051][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.229587][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.249959][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.275106][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.284974][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.315133][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.345381][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.365087][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.388638][T14328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.427637][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.456735][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.485198][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.512546][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.535083][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.556541][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.575425][T14328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.595261][T14328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.616876][T14328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.650820][T14328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.675134][T14328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.683887][T14328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.715159][T14328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.583428][T14463] netlink: 'syz.2.2874': attribute type 22 has an invalid length. [ 594.615258][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 594.955619][T14472] netlink: 'syz.0.2877': attribute type 21 has an invalid length. [ 595.000628][T14472] netlink: 'syz.0.2877': attribute type 1 has an invalid length. [ 595.039706][T14472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2877'. [ 595.215162][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.237976][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.454750][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.494590][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.473799][T14507] netlink: 'syz.4.2840': attribute type 2 has an invalid length. [ 596.494934][T14507] netlink: 'syz.4.2840': attribute type 1 has an invalid length. [ 596.572393][T14507] netlink: 'syz.4.2840': attribute type 27 has an invalid length. [ 599.584402][T14507] bond0: (slave bond_slave_0): Releasing backup interface [ 599.983572][T14526] netlink: 'syz.0.2883': attribute type 22 has an invalid length. [ 600.020003][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'. [ 600.527948][T14542] netlink: 'syz.0.2894': attribute type 22 has an invalid length. [ 600.547948][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 601.770682][ T2965] hsr_slave_0: left promiscuous mode [ 601.779854][ T2965] hsr_slave_1: left promiscuous mode [ 601.788372][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.800694][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.809108][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.816884][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.825238][ T2965] bridge_slave_1: left allmulticast mode [ 601.830973][ T2965] bridge_slave_1: left promiscuous mode [ 601.836764][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.847615][ T2965] bridge_slave_0: left allmulticast mode [ 601.853277][ T2965] bridge_slave_0: left promiscuous mode [ 601.859223][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.878724][ T2965] veth1_macvtap: left promiscuous mode [ 601.886665][ T2965] veth0_macvtap: left promiscuous mode [ 601.892412][ T2965] veth1_vlan: left promiscuous mode [ 601.899123][ T2965] veth0_vlan: left promiscuous mode [ 602.331729][ T2965] team0 (unregistering): Port device team_slave_1 removed [ 602.371197][ T2965] team0 (unregistering): Port device team_slave_0 removed [ 602.404972][ T2965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.659753][ T2965] bond0 (unregistering): Released all slaves [ 602.896515][T14576] netlink: 'syz.4.2892': attribute type 21 has an invalid length. [ 602.911277][T14576] netlink: 'syz.4.2892': attribute type 1 has an invalid length. [ 602.925934][T14576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2892'. [ 606.747215][T14606] netlink: 'syz.3.2897': attribute type 2 has an invalid length. [ 606.775071][T14606] netlink: 'syz.3.2897': attribute type 1 has an invalid length. [ 606.916805][T14606] netlink: 'syz.3.2897': attribute type 27 has an invalid length. [ 607.111094][T14614] netlink: 'syz.0.2898': attribute type 22 has an invalid length. [ 607.129017][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'. [ 607.402749][T14631] netlink: 'syz.0.2903': attribute type 21 has an invalid length. [ 607.426234][T14631] netlink: 'syz.0.2903': attribute type 1 has an invalid length. [ 607.434200][T14631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2903'. [ 610.435463][T14687] netlink: 'syz.2.2909': attribute type 2 has an invalid length. [ 610.443291][T14687] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 610.548182][T14689] netlink: 'syz.2.2909': attribute type 27 has an invalid length. [ 611.369187][T14699] netlink: 'syz.2.2911': attribute type 22 has an invalid length. [ 611.418380][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 612.498578][T14717] netlink: 'syz.4.2916': attribute type 21 has an invalid length. [ 612.519025][T14717] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 612.551096][T14717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2916'. [ 617.321368][T14754] netlink: 'syz.4.2919': attribute type 2 has an invalid length. [ 617.329313][T14754] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 617.532637][T14752] netlink: 'syz.4.2919': attribute type 27 has an invalid length. [ 619.426458][T14797] netlink: 'syz.3.2930': attribute type 2 has an invalid length. [ 619.451957][T14797] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 619.482241][T14793] netlink: 'syz.3.2930': attribute type 27 has an invalid length. [ 623.418583][T14857] netlink: 'syz.0.2940': attribute type 2 has an invalid length. [ 623.455238][T14857] netlink: 'syz.0.2940': attribute type 1 has an invalid length. [ 623.542098][T14857] netlink: 'syz.0.2940': attribute type 27 has an invalid length. [ 624.502862][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.509433][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.608494][T14937] netlink: 'syz.3.2953': attribute type 21 has an invalid length. [ 630.617524][T14937] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 630.626216][T14937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2953'. [ 631.132781][T14955] netlink: 'syz.2.2962': attribute type 2 has an invalid length. [ 631.162063][T14955] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 631.242516][T14955] netlink: 'syz.2.2962': attribute type 27 has an invalid length. [ 635.681839][T15039] netlink: 'syz.2.2965': attribute type 2 has an invalid length. [ 635.705123][T15039] netlink: 'syz.2.2965': attribute type 1 has an invalid length. [ 635.751572][T15035] netlink: 'syz.2.2965': attribute type 27 has an invalid length. [ 635.994231][T15047] netlink: 'syz.0.2968': attribute type 2 has an invalid length. [ 636.020472][T15047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2968'. [ 636.364887][T15054] netlink: 'syz.4.2970': attribute type 2 has an invalid length. [ 636.381695][T15054] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2970'. [ 636.517698][T15058] netlink: 'syz.0.2971': attribute type 21 has an invalid length. [ 636.550920][T15058] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 636.590112][T15058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2971'. [ 637.570743][T15068] netlink: 'syz.2.2972': attribute type 2 has an invalid length. [ 637.585063][T15068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2972'. [ 637.947680][T15080] netlink: 'syz.4.2977': attribute type 2 has an invalid length. [ 637.964488][T15080] netlink: 'syz.4.2977': attribute type 1 has an invalid length. [ 638.664118][T15094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2981'. [ 638.967716][T15099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2982'. [ 642.289115][T15110] validate_nla: 5 callbacks suppressed [ 642.289132][T15110] netlink: 'syz.0.2984': attribute type 2 has an invalid length. [ 642.336636][T15110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2984'. [ 642.369108][T15113] netlink: 'syz.3.2986': attribute type 27 has an invalid length. [ 643.671715][T15138] netlink: 'syz.3.2992': attribute type 2 has an invalid length. [ 643.682232][T15138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2992'. [ 645.985396][T15165] netlink: 'syz.4.2999': attribute type 2 has an invalid length. [ 645.993180][T15165] netlink: 'syz.4.2999': attribute type 1 has an invalid length. [ 646.115329][T15160] netlink: 'syz.3.2998': attribute type 2 has an invalid length. [ 646.134757][T15160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2998'. [ 646.147853][T15162] netlink: 'syz.4.2999': attribute type 27 has an invalid length. [ 649.079542][T15183] netlink: 'syz.2.3006': attribute type 2 has an invalid length. [ 649.087714][T15183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3006'. [ 649.796510][T15200] netlink: 'syz.3.3011': attribute type 2 has an invalid length. [ 649.814178][T15200] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 649.853376][T15197] netlink: 'syz.3.3011': attribute type 27 has an invalid length. [ 650.074592][T15208] netlink: 'syz.3.3014': attribute type 21 has an invalid length. [ 650.083280][T15208] netlink: 'syz.3.3014': attribute type 1 has an invalid length. [ 650.099214][T15208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3014'. [ 650.168185][T15213] netlink: 'syz.0.3022': attribute type 2 has an invalid length. [ 650.180978][T15213] netlink: 'syz.0.3022': attribute type 1 has an invalid length. [ 650.224338][T15210] netlink: 'syz.0.3022': attribute type 27 has an invalid length. [ 650.528240][T15219] netlink: 'syz.3.3015': attribute type 2 has an invalid length. [ 650.570387][T15219] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3015'. [ 653.399178][T15223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3017'. [ 654.049705][T15230] sit0: entered allmulticast mode [ 654.304384][T15246] validate_nla: 1 callbacks suppressed [ 654.304401][T15246] netlink: 'syz.0.3025': attribute type 2 has an invalid length. [ 654.333119][T15246] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 654.741595][T15248] netlink: 'syz.0.3025': attribute type 27 has an invalid length. [ 655.002781][T15250] netlink: 'syz.3.3026': attribute type 2 has an invalid length. [ 655.015495][T15250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3026'. [ 655.604861][T15264] netlink: 'syz.0.3029': attribute type 2 has an invalid length. [ 655.625845][T15264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3029'. [ 655.659908][T15265] netlink: 'syz.3.3030': attribute type 2 has an invalid length. [ 655.669536][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3030'. [ 656.240360][T15280] netlink: 'syz.0.3036': attribute type 2 has an invalid length. [ 656.263091][T15280] netlink: 'syz.0.3036': attribute type 1 has an invalid length. [ 656.344616][T15278] netlink: 'syz.0.3036': attribute type 27 has an invalid length. [ 659.494764][T15294] netlink: 'syz.0.3039': attribute type 2 has an invalid length. [ 659.515435][T15294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3039'. [ 659.939404][T15304] netlink: 'syz.2.3044': attribute type 2 has an invalid length. [ 659.959599][T15304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3044'. [ 659.997128][T15306] netlink: 'syz.4.3043': attribute type 2 has an invalid length. [ 660.022825][T15306] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3043'. [ 660.070475][T15313] netlink: 'syz.0.3046': attribute type 2 has an invalid length. [ 660.098830][T15313] netlink: 'syz.0.3046': attribute type 1 has an invalid length. [ 660.245742][T15310] netlink: 'syz.0.3046': attribute type 27 has an invalid length. [ 661.273868][T15332] netlink: 'syz.2.3053': attribute type 2 has an invalid length. [ 661.283575][T15332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3053'. [ 661.718808][T15340] netlink: 'syz.0.3056': attribute type 2 has an invalid length. [ 661.730692][T15340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3056'. [ 661.920336][T15344] netlink: 'syz.3.3058': attribute type 2 has an invalid length. [ 661.936259][T15344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3058'. [ 662.085836][T15352] netlink: 'syz.0.3059': attribute type 2 has an invalid length. [ 662.093588][T15350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3060'. [ 662.426243][T15358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3063'. [ 662.598406][T15364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3066'. [ 663.379770][T15378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3067'. [ 665.838161][T15383] validate_nla: 6 callbacks suppressed [ 665.838178][T15383] netlink: 'syz.4.3069': attribute type 2 has an invalid length. [ 665.865142][T15383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3069'. [ 666.281603][T15395] netlink: 'syz.4.3072': attribute type 2 has an invalid length. [ 666.306227][T15395] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 666.410780][T15398] netlink: 'syz.3.3071': attribute type 2 has an invalid length. [ 666.429544][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3071'. [ 666.474901][T15391] netlink: 'syz.4.3072': attribute type 27 has an invalid length. [ 666.679921][T15400] netlink: 'syz.3.3075': attribute type 2 has an invalid length. [ 666.696681][T15400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3075'. [ 666.895776][T15406] netlink: 'syz.0.3078': attribute type 2 has an invalid length. [ 666.906840][T15406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3078'. [ 667.376571][T15419] netlink: 'syz.4.3082': attribute type 2 has an invalid length. [ 667.384364][T15419] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3082'. [ 667.541969][T15423] netlink: 'syz.0.3083': attribute type 2 has an invalid length. [ 667.569575][T15423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3083'. [ 670.223232][T15431] netlink: 'syz.2.3087': attribute type 2 has an invalid length. [ 670.446223][T15427] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3086'. [ 670.773078][T15442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3092'. [ 671.254723][T15446] validate_nla: 4 callbacks suppressed [ 671.254740][T15446] netlink: 'syz.2.3090': attribute type 2 has an invalid length. [ 671.269246][T15446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3090'. [ 671.976100][T15461] netlink: 'syz.3.3097': attribute type 2 has an invalid length. [ 671.989013][T15461] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 671.999604][T15461] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3097'. [ 672.293022][T15469] netlink: 'syz.3.3099': attribute type 2 has an invalid length. [ 672.311248][T15469] netlink: 'syz.3.3099': attribute type 1 has an invalid length. [ 672.343108][T15466] netlink: 'syz.3.3099': attribute type 27 has an invalid length. [ 677.609192][T15491] netlink: 'syz.4.3105': attribute type 2 has an invalid length. [ 677.635247][T15491] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3105'. [ 677.850414][T15496] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 677.876111][T15496] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 677.884607][T15496] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3108'. [ 677.922407][T15496] sit0: entered allmulticast mode [ 681.944895][T15536] netlink: 'syz.2.3118': attribute type 2 has an invalid length. [ 681.954174][T15536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3118'. [ 682.347023][T15543] netlink: 'syz.2.3120': attribute type 2 has an invalid length. [ 682.358236][T15543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3120'. [ 685.933283][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.940244][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.916094][T15573] netlink: 'syz.0.3129': attribute type 2 has an invalid length. [ 687.924412][T15573] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3129'. [ 688.916037][T15585] netlink: 'syz.3.3132': attribute type 2 has an invalid length. [ 688.931861][T15585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3132'. [ 692.202280][T15610] netlink: 'syz.2.3148': attribute type 2 has an invalid length. [ 692.215955][T15610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3148'. [ 692.690306][T15613] netlink: 'syz.0.3150': attribute type 2 has an invalid length. [ 692.724989][T15613] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3150'. [ 693.338724][T15629] netlink: 'syz.4.3145': attribute type 2 has an invalid length. [ 693.358361][T15629] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3145'. [ 693.630381][T15636] netlink: 'syz.3.3151': attribute type 2 has an invalid length. [ 693.639229][T15636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3151'. [ 693.787045][T15640] netlink: 'syz.3.3153': attribute type 2 has an invalid length. [ 693.795492][T15640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3153'. [ 696.913821][T15667] netlink: 'syz.4.3162': attribute type 2 has an invalid length. [ 696.939928][T15667] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 696.989953][T15667] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3162'. [ 697.381366][T15676] netlink: 'syz.3.3164': attribute type 2 has an invalid length. [ 697.393039][T15676] netlink: 'syz.3.3164': attribute type 1 has an invalid length. [ 697.404698][T15676] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3164'. [ 697.508140][T15672] sit0: entered allmulticast mode [ 697.807548][T15686] netlink: 'syz.0.3167': attribute type 2 has an invalid length. [ 697.836938][T15686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3167'. [ 701.537559][T15720] netlink: 'syz.0.3175': attribute type 2 has an invalid length. [ 701.574907][T15720] netlink: 'syz.0.3175': attribute type 1 has an invalid length. [ 701.584979][T15720] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3175'. [ 702.053072][T15731] netlink: 'syz.0.3176': attribute type 2 has an invalid length. [ 702.062364][T15731] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 702.100661][T15731] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3176'. [ 702.333065][T15738] netlink: 'syz.0.3178': attribute type 2 has an invalid length. [ 702.345640][T15738] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 702.355965][T15738] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3178'. [ 702.762077][T15741] netlink: 'syz.3.3180': attribute type 2 has an invalid length. [ 702.771343][T15741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3180'. [ 704.581799][T15761] netlink: 'syz.3.3187': attribute type 2 has an invalid length. [ 704.590604][T15761] netlink: 'syz.3.3187': attribute type 1 has an invalid length. [ 704.602933][T15761] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3187'. [ 705.560103][T15777] netlink: 'syz.2.3192': attribute type 2 has an invalid length. [ 705.568372][T15777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3192'. [ 705.686717][T15779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3193'. [ 706.678933][T15788] validate_nla: 1 callbacks suppressed [ 706.678966][T15788] netlink: 'syz.0.3196': attribute type 2 has an invalid length. [ 706.693031][T15788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3196'. [ 708.279650][T15806] netlink: 'syz.4.3201': attribute type 2 has an invalid length. [ 708.288188][T15806] netlink: 'syz.4.3201': attribute type 1 has an invalid length. [ 708.297689][T15806] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3201'. [ 708.485379][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 709.153901][T15816] netlink: 'syz.2.3204': attribute type 2 has an invalid length. [ 709.168916][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3204'. [ 711.225109][T15821] netlink: 'syz.2.3206': attribute type 2 has an invalid length. [ 711.233812][T15821] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 711.249250][T15821] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3206'. [ 711.279036][T15826] netlink: 'syz.0.3214': attribute type 2 has an invalid length. [ 711.305964][T15826] netlink: 'syz.0.3214': attribute type 1 has an invalid length. [ 711.577407][T15830] netlink: 'syz.0.3210': attribute type 2 has an invalid length. [ 711.588329][T15830] netlink: 'syz.0.3210': attribute type 1 has an invalid length. [ 711.610884][T15830] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3210'. [ 713.404073][T15855] netlink: 'syz.4.3216': attribute type 2 has an invalid length. [ 713.419962][T15855] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3216'. [ 713.924296][T15866] netlink: 'syz.4.3219': attribute type 2 has an invalid length. [ 713.935564][T15866] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 715.784543][T15872] netlink: 'syz.3.3229': attribute type 2 has an invalid length. [ 715.805677][T15872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3229'. [ 716.321492][T15883] netlink: 'syz.4.3223': attribute type 2 has an invalid length. [ 716.336904][T15883] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 716.351606][T15883] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3223'. [ 717.614842][T15901] netlink: 'syz.3.3227': attribute type 2 has an invalid length. [ 717.629071][T15901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3227'. [ 717.793404][T15903] netlink: 'syz.3.3228': attribute type 2 has an invalid length. [ 717.801226][T15903] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 719.744670][T15920] netlink: 'syz.0.3233': attribute type 2 has an invalid length. [ 719.752973][T15920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3233'. [ 719.899544][T15924] netlink: 'syz.4.3235': attribute type 2 has an invalid length. [ 719.925459][T15924] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3235'. [ 720.260074][T15934] netlink: 'syz.4.3246': attribute type 2 has an invalid length. [ 720.268754][T15934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3246'. [ 720.289395][T15935] netlink: 'syz.2.3238': attribute type 2 has an invalid length. [ 720.313875][T15935] netlink: 'syz.2.3238': attribute type 1 has an invalid length. [ 720.325535][T15935] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3238'. [ 727.343318][T15973] netlink: 'syz.3.3248': attribute type 2 has an invalid length. [ 727.353105][T15973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3248'. [ 727.814461][T15979] netlink: 'syz.3.3250': attribute type 2 has an invalid length. [ 727.823083][T15979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3250'. [ 733.593329][T16015] netlink: 'syz.2.3259': attribute type 2 has an invalid length. [ 733.602254][T16015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3259'. [ 736.479094][T16046] netlink: 'syz.2.3266': attribute type 2 has an invalid length. [ 736.491287][T16046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3266'. [ 740.011305][T16071] netlink: 'syz.2.3275': attribute type 2 has an invalid length. [ 740.034336][T16071] netlink: 'syz.2.3275': attribute type 1 has an invalid length. [ 746.820238][T16116] netlink: 'syz.4.3284': attribute type 2 has an invalid length. [ 746.839245][T16116] netlink: 'syz.4.3284': attribute type 1 has an invalid length. [ 747.161303][T16126] netlink: 'syz.0.3289': attribute type 2 has an invalid length. [ 747.169838][T16126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3289'. [ 747.401697][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.411571][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.776348][T16153] netlink: 'syz.4.3296': attribute type 2 has an invalid length. [ 750.796572][T16153] netlink: 'syz.4.3296': attribute type 1 has an invalid length. [ 754.242737][T16159] netlink: 'syz.2.3299': attribute type 2 has an invalid length. [ 754.253317][T16159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3299'. [ 754.873077][T16169] netlink: 'syz.3.3303': attribute type 2 has an invalid length. [ 754.883111][T16169] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3303'. [ 757.913498][T16188] netlink: 'syz.0.3308': attribute type 2 has an invalid length. [ 757.935475][T16188] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 758.632352][T16200] netlink: 'syz.4.3310': attribute type 2 has an invalid length. [ 758.646281][T16200] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3310'. [ 758.814499][T16206] netlink: 'syz.3.3319': attribute type 2 has an invalid length. [ 758.835165][T16206] netlink: 'syz.3.3319': attribute type 1 has an invalid length. [ 763.504823][T16254] netlink: 'syz.2.3322': attribute type 2 has an invalid length. [ 763.516158][T16254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3322'. [ 763.879084][T16269] netlink: 'syz.2.3325': attribute type 2 has an invalid length. [ 763.895210][T16269] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 767.766143][T16302] netlink: 'syz.2.3335': attribute type 2 has an invalid length. [ 767.774124][T16302] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 771.415233][T16338] netlink: 'syz.4.3346': attribute type 2 has an invalid length. [ 771.425194][T16338] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 772.547496][T16358] netlink: 'syz.0.3354': attribute type 2 has an invalid length. [ 772.559137][T16358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3354'. [ 775.752246][T16375] netlink: 'syz.4.3359': attribute type 2 has an invalid length. [ 775.768833][T16375] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3359'. [ 775.787820][T16379] netlink: 'syz.0.3360': attribute type 2 has an invalid length. [ 775.812368][T16379] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 776.281441][T16386] netlink: 'syz.2.3365': attribute type 2 has an invalid length. [ 776.301864][T16386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3365'. [ 776.324991][T16395] netlink: 'syz.0.3374': attribute type 2 has an invalid length. [ 776.361070][T16395] netlink: 'syz.0.3374': attribute type 1 has an invalid length. [ 776.959954][T16411] netlink: 'syz.2.3368': attribute type 2 has an invalid length. [ 776.999044][T16411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3368'. [ 780.129869][T16426] netlink: 'syz.3.3375': attribute type 2 has an invalid length. [ 780.138426][T16426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3375'. [ 780.334746][T16431] netlink: 'syz.3.3377': attribute type 2 has an invalid length. [ 780.342948][T16431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3377'. [ 780.530292][T16438] netlink: 'syz.3.3378': attribute type 2 has an invalid length. [ 780.556119][T16438] netlink: 'syz.3.3378': attribute type 1 has an invalid length. [ 783.992571][T16471] netlink: 'syz.4.3388': attribute type 2 has an invalid length. [ 784.013630][T16471] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 784.483464][T16474] netlink: 'syz.2.3387': attribute type 2 has an invalid length. [ 784.492108][T16474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3387'. [ 784.749247][T16485] netlink: 'syz.3.3398': attribute type 2 has an invalid length. [ 784.785759][T16485] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 785.102046][T16489] netlink: 'syz.4.3391': attribute type 2 has an invalid length. [ 785.119761][T16489] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3391'. [ 792.008903][T16524] netlink: 'syz.0.3401': attribute type 2 has an invalid length. [ 792.020991][T16524] netlink: 'syz.0.3401': attribute type 1 has an invalid length. [ 792.133241][T16529] netlink: 'syz.0.3402': attribute type 2 has an invalid length. [ 792.141371][T16529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3402'. [ 792.245939][T16531] netlink: 'syz.0.3403': attribute type 2 has an invalid length. [ 792.254033][T16531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3403'. [ 795.682849][T16553] netlink: 'syz.4.3411': attribute type 2 has an invalid length. [ 795.690661][T16553] netlink: 'syz.4.3411': attribute type 1 has an invalid length. [ 795.841495][T16560] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 795.850247][T16560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3412'. [ 795.859093][T16562] netlink: 'syz.0.3420': attribute type 2 has an invalid length. [ 795.875146][T16562] netlink: 'syz.0.3420': attribute type 1 has an invalid length. [ 798.107423][T16576] netlink: 'syz.4.3416': attribute type 2 has an invalid length. [ 798.142425][T16576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3416'. [ 801.911916][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 801.932070][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 801.945444][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 801.958570][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 801.978178][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 801.989589][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 802.453812][T16598] chnl_net:caif_netlink_parms(): no params data found [ 802.513967][T16598] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.521444][T16598] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.529508][T16598] bridge_slave_0: entered allmulticast mode [ 802.536817][T16598] bridge_slave_0: entered promiscuous mode [ 802.544323][T16598] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.551830][T16598] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.559172][T16598] bridge_slave_1: entered allmulticast mode [ 802.566865][T16598] bridge_slave_1: entered promiscuous mode [ 802.611725][T16598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.623178][T16598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.653715][T16598] team0: Port device team_slave_0 added [ 802.666998][T16598] team0: Port device team_slave_1 added [ 802.689099][T16598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.696485][T16598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.722569][T16598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.739239][T16598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.746315][T16598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.772476][T16598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.815471][T16598] hsr_slave_0: entered promiscuous mode [ 802.821729][T16598] hsr_slave_1: entered promiscuous mode [ 802.830305][T16598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.837980][T16598] Cannot create hsr debugfs directory [ 802.975859][T16598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 802.986186][T16598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 803.000502][T16598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 803.012832][T16598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 803.036983][T16598] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.044158][T16598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.051611][T16598] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.058797][T16598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.113225][T16598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.133197][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.144020][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.164674][T16598] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.182577][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.189689][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.198953][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.206116][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.373891][T14518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.418959][T16598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.466825][T14518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.557615][T14518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.622943][T14518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.670802][T16598] veth0_vlan: entered promiscuous mode [ 803.681182][T16598] veth1_vlan: entered promiscuous mode [ 803.721439][T16598] veth0_macvtap: entered promiscuous mode [ 803.735641][T16598] veth1_macvtap: entered promiscuous mode [ 803.822799][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.849602][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.863392][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.874584][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.884636][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.897496][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.907706][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.918313][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.937401][T16598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.993188][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.003785][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.014763][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.025541][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.035524][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.048948][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.060514][T16598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.072194][T16598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.083600][T16598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.093968][ T51] Bluetooth: hci3: command tx timeout [ 804.126865][T16598] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.142576][T16598] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.153859][T16598] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.163601][T16598] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.259257][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.278568][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.350268][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.362206][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.573084][T16652] netlink: 'syz.5.3429': attribute type 2 has an invalid length. [ 805.591856][T16652] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3429'. [ 806.165678][ T51] Bluetooth: hci3: command tx timeout [ 806.240275][T14518] hsr_slave_0: left promiscuous mode [ 806.254197][T14518] hsr_slave_1: left promiscuous mode [ 806.276089][T14518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.296437][T14518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.311965][T14518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.329723][T14518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.346501][T14518] bridge_slave_1: left allmulticast mode [ 806.356977][T14518] bridge_slave_1: left promiscuous mode [ 806.363021][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.411820][T14518] bridge_slave_0: left allmulticast mode [ 806.431886][T14518] bridge_slave_0: left promiscuous mode [ 806.455590][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.502255][T14518] veth1_macvtap: left promiscuous mode [ 806.513655][T14518] veth0_macvtap: left promiscuous mode [ 806.533092][T14518] veth1_vlan: left promiscuous mode [ 806.555430][T14518] veth0_vlan: left promiscuous mode [ 808.245137][ T51] Bluetooth: hci3: command tx timeout [ 808.808979][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.825321][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.213957][T14518] team0 (unregistering): Port device team_slave_1 removed [ 810.257708][T14518] team0 (unregistering): Port device team_slave_0 removed [ 810.291141][T14518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.338853][ T51] Bluetooth: hci3: command tx timeout [ 810.560304][T14518] bond0 (unregistering): Released all slaves [ 810.641740][T16686] netlink: 'syz.4.3433': attribute type 2 has an invalid length. [ 810.651926][T16686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3433'. [ 812.654628][T16754] netlink: 'syz.2.3446': attribute type 2 has an invalid length. [ 812.678057][T16754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3446'. [ 813.020263][T16765] netlink: 'syz.5.3450': attribute type 2 has an invalid length. [ 813.035179][T16765] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3450'. [ 816.262130][T16847] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 816.280847][T16847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3456'. [ 817.829181][T16867] netlink: 'syz.0.3460': attribute type 2 has an invalid length. [ 817.838057][T16867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3460'. [ 822.122052][T16910] netlink: 'syz.4.3470': attribute type 2 has an invalid length. [ 822.155184][T16910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3470'. [ 823.670805][T16941] netlink: 'syz.5.3476': attribute type 2 has an invalid length. [ 823.678710][T16941] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3476'. [ 825.934239][T16959] netlink: 'syz.5.3480': attribute type 2 has an invalid length. [ 825.943674][T16959] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3480'. [ 833.079788][T17094] netlink: 'syz.5.3508': attribute type 2 has an invalid length. [ 833.088569][T17094] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3508'. [ 833.103465][T17096] netlink: 'syz.0.3510': attribute type 2 has an invalid length. [ 833.115980][T17096] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3510'. [ 833.659147][T17114] netlink: 'syz.4.3515': attribute type 2 has an invalid length. [ 833.684853][T17114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3515'. [ 835.661687][T17169] netlink: 'syz.5.3529': attribute type 2 has an invalid length. [ 835.692653][T17169] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3529'. [ 836.321949][T17193] netlink: 'syz.0.3537': attribute type 2 has an invalid length. [ 836.338238][T17193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3537'. [ 836.886554][T17212] netlink: 'syz.2.3542': attribute type 2 has an invalid length. [ 836.910695][T17212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3542'. [ 837.519689][T17233] netlink: 'syz.4.3547': attribute type 2 has an invalid length. [ 837.535266][T17233] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3547'. [ 870.258161][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.264777][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.504886][T17651] netlink: 'syz.4.3693': attribute type 2 has an invalid length. [ 884.513422][T17651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3693'. [ 887.844411][T17677] netlink: 'syz.5.3703': attribute type 2 has an invalid length. [ 887.865542][T17677] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3703'. [ 928.647923][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 931.710313][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.716934][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.325785][ T28] INFO: task syz.3.3394:16495 blocked for more than 143 seconds. [ 932.333561][ T28] Not tainted syzkaller #0 [ 932.355124][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 932.363849][ T28] task:syz.3.3394 state:D stack:25128 pid:16495 ppid:12811 flags:0x00004006 [ 932.405257][ T28] Call Trace: [ 932.408714][ T28] [ 932.411681][ T28] __schedule+0x15ae/0x4660 [ 932.445562][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 932.450746][ T28] ? asan.module_dtor+0x20/0x20 [ 932.475166][ T28] ? trace_contention_end+0x39/0xe0 [ 932.480416][ T28] ? task_work_cancel+0xa5/0x220 [ 932.515208][ T28] ? task_work_cancel_func+0x210/0x210 [ 932.520713][ T28] schedule+0xbd/0x170 [ 932.524795][ T28] ? _free_event+0x10d/0xfb0 [ 932.545206][ T28] _free_event+0x176/0xfb0 [ 932.549679][ T28] perf_event_release_kernel+0x7c8/0x850 [ 932.579793][ T28] ? __might_sleep+0xe0/0xe0 [ 932.586218][ T28] ? calc_timer_values+0x400/0x400 [ 932.591647][ T28] ? perf_mmap+0x15e0/0x15e0 [ 932.598777][ T28] perf_release+0x3b/0x40 [ 932.603301][ T28] __fput+0x221/0x940 [ 932.610832][ T28] task_work_run+0x1d4/0x260 [ 932.618079][ T28] ? task_work_cancel+0x220/0x220 [ 932.623230][ T28] do_exit+0x986/0x2530 [ 932.630730][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 932.638265][ T28] ? put_task_struct+0xc0/0xc0 [ 932.643489][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 932.657219][ T28] ? get_signal+0x11fa/0x1390 [ 932.668591][ T28] ? lock_chain_count+0x20/0x20 [ 932.676796][ T28] do_group_exit+0x22d/0x2f0 [ 932.681511][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 932.693105][ T28] get_signal+0x12a6/0x1390 [ 932.699886][ T28] arch_do_signal_or_restart+0xc2/0x7b0 [ 932.709188][ T28] ? mutex_unlock+0x10/0x10 [ 932.713800][ T28] ? get_sigframe_size+0x20/0x20 [ 932.721349][ T28] ? ksys_write+0x201/0x260 [ 932.728345][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 932.739271][ T28] exit_to_user_mode_loop+0x70/0x110 [ 932.744754][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 932.751930][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 932.762832][ T28] do_syscall_64+0x61/0xb0 [ 932.769762][ T28] ? clear_bhb_loop+0x40/0x90 [ 932.779254][ T28] ? clear_bhb_loop+0x40/0x90 [ 932.784048][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.790630][ T28] RIP: 0033:0x7f5fa759e0d9 [ 932.795534][ T28] RSP: 002b:00007f5fa83d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 932.804250][ T28] RAX: 0000000000000012 RBX: 00007f5fa7825fa0 RCX: 00007f5fa759e0d9 [ 932.813280][ T28] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 000000000000000a [ 932.821841][ T28] RBP: 00007f5fa7635024 R08: 0000000000000000 R09: 0000000000000000 [ 932.830167][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.839299][ T28] R13: 00007f5fa7826038 R14: 00007f5fa7825fa0 R15: 00007ffc33abc198 [ 932.849812][ T28] [ 932.852956][ T28] [ 932.852956][ T28] Showing all locks held in the system: [ 932.862550][ T28] 1 lock held by khungtaskd/28: [ 932.872799][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 932.891655][ T28] 2 locks held by getty/5536: [ 932.896919][ T28] #0: ffff88803154a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 932.912225][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 932.924718][ T28] 2 locks held by kworker/1:3/5782: [ 932.932789][ T28] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 932.950296][ T28] #1: ffffc900046ffd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 932.964867][ T28] 1 lock held by syz.4.3848/18076: [ 932.974928][ T28] #0: ffffffff8d188088 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 932.992710][ T28] 1 lock held by syz.5.3849/18079: [ 933.000609][ T28] #0: ffffffff8d188088 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 933.014674][ T28] 5 locks held by syz.5.3849/18080: [ 933.021496][ T28] 2 locks held by syz.2.3851/18085: [ 933.031668][ T28] #0: ffffffff8d188088 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 933.044639][ T28] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 933.061780][ T28] 2 locks held by syz.0.3852/18088: [ 933.068312][ T28] #0: ffffffff97341c70 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xb23/0x2150 [ 933.083503][ T28] #1: ffffffff8d188088 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x50/0x2d0 [ 933.099209][ T28] [ 933.101643][ T28] ============================================= [ 933.101643][ T28] [ 933.113663][ T28] NMI backtrace for cpu 1 [ 933.118020][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 933.125226][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 933.135290][ T28] Call Trace: [ 933.138575][ T28] [ 933.141519][ T28] dump_stack_lvl+0x18c/0x250 [ 933.146216][ T28] ? __wake_up_klogd+0xd9/0x100 [ 933.151089][ T28] ? show_regs_print_info+0x20/0x20 [ 933.156300][ T28] ? load_image+0x420/0x420 [ 933.160833][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 933.165791][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 933.171962][ T28] ? load_image+0x420/0x420 [ 933.176492][ T28] ? wq_watchdog_touch+0xef/0x170 [ 933.181551][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 933.187672][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 933.193678][ T28] watchdog+0xf59/0xfa0 [ 933.197861][ T28] ? watchdog+0x1e1/0xfa0 [ 933.202222][ T28] kthread+0x2fa/0x390 [ 933.206301][ T28] ? hungtask_pm_notify+0x50/0x50 [ 933.211342][ T28] ? kthread_blkcg+0xd0/0xd0 [ 933.215948][ T28] ret_from_fork+0x48/0x80 [ 933.220385][ T28] ? kthread_blkcg+0xd0/0xd0 [ 933.224991][ T28] ret_from_fork_asm+0x11/0x20 [ 933.229812][ T28] [ 933.233833][ T28] Sending NMI from CPU 1 to CPUs 0: [ 933.239237][ C0] NMI backtrace for cpu 0 [ 933.239246][ C0] CPU: 0 PID: 18080 Comm: syz.5.3849 Not tainted syzkaller #0 [ 933.239262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 933.239270][ C0] RIP: 0010:kasan_check_range+0x6a/0x290 [ 933.239294][ C0] Code: 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 <4d> 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 [ 933.239306][ C0] RSP: 0018:ffffc90000007988 EFLAGS: 00000803 [ 933.239320][ C0] RAX: 0000000000000001 RBX: dffffc0000000001 RCX: ffffffff81694414 [ 933.239331][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb508 [ 933.239341][ C0] RBP: 0000000000000001 R08: ffffffff911eb50f R09: 1ffffffff223d6a1 [ 933.239351][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: fffffbfff223d6a2 [ 933.239362][ C0] R13: dffffc0000000000 R14: fffffbfff223d6a2 R15: 1ffffffff223d6a1 [ 933.239373][ C0] FS: 00007f79133ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 933.239387][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.239397][ C0] CR2: 00007fcaca027dac CR3: 0000000064502000 CR4: 00000000003506f0 [ 933.239411][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 933.239420][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 933.239430][ C0] Call Trace: [ 933.239434][ C0] [ 933.239441][ C0] mark_lock+0x94/0x320 [ 933.239461][ C0] __lock_acquire+0xc5c/0x7d80 [ 933.239488][ C0] ? verify_lock_unused+0x140/0x140 [ 933.239507][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 933.239522][ C0] ? __rwlock_init+0x150/0x150 [ 933.239542][ C0] ? verify_lock_unused+0x140/0x140 [ 933.239558][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 933.239578][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 933.239602][ C0] lock_acquire+0x19e/0x420 [ 933.239618][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 933.239640][ C0] ? ktime_get_update_offsets_now+0x48/0x3f0 [ 933.239659][ C0] ? read_lock_is_recursive+0x20/0x20 [ 933.239679][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 933.239697][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 933.239716][ C0] seqcount_lockdep_reader_access+0xd1/0x1d0 [ 933.239734][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 933.239752][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 933.239772][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 933.239795][ C0] ktime_get_update_offsets_now+0x99/0x3f0 [ 933.239817][ C0] hrtimer_interrupt+0x11e/0x980 [ 933.239837][ C0] ? local_clock+0x20/0x20 [ 933.239851][ C0] ? __irq_exit_rcu+0xdf/0x190 [ 933.239866][ C0] ? irq_exit_rcu+0x20/0x20 [ 933.239883][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 933.239903][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 933.239923][ C0] [ 933.239928][ C0] [ 933.239932][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 933.239950][ C0] RIP: 0010:deref_stack_reg+0x13/0x230 [ 933.239964][ C0] Code: c3 23 a4 00 48 8b 4c 24 18 e9 c1 fe ff ff 66 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 89 54 24 10 <48> 89 34 24 49 89 ff 48 bd 00 00 00 00 00 fc ff df e8 37 a1 4b 00 [ 933.239976][ C0] RSP: 0018:ffffc90003956aa8 EFLAGS: 00000292 [ 933.239988][ C0] RAX: fffffffffffffff0 RBX: ffffffff8fad9b25 RCX: 0000000000000003 [ 933.239998][ C0] RDX: ffffc90003956c08 RSI: ffffc90003957f48 RDI: ffffc90003956bc8 [ 933.240010][ C0] RBP: ffffc90003956c18 R08: ffff888031945a00 R09: 0000000000000003 [ 933.240026][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc90003957f20 [ 933.240035][ C0] R13: ffffc90003956bc8 R14: ffffffff8fad9b24 R15: dffffc0000000000 [ 933.240056][ C0] unwind_next_frame+0x1781/0x2990 [ 933.240075][ C0] ? do_syscall_64+0x55/0xb0 [ 933.240091][ C0] ? do_syscall_64+0x55/0xb0 [ 933.240105][ C0] ? stack_trace_save+0x100/0x100 [ 933.240123][ C0] arch_stack_walk+0x144/0x190 [ 933.240140][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 933.240158][ C0] stack_trace_save+0xaa/0x100 [ 933.240175][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 933.240194][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 933.240218][ C0] kasan_set_track+0x4e/0x70 [ 933.240233][ C0] ? kasan_set_track+0x4e/0x70 [ 933.240248][ C0] ? kasan_save_free_info+0x28/0x40 [ 933.240267][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 933.240282][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 933.240297][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 933.240317][ C0] ? skb_release_data+0x609/0x7f0 [ 933.240374][ C0] ? kfree_skb_reason+0x10e/0x170 [ 933.240388][ C0] ? __dev_forward_skb2+0x546/0x770 [ 933.240458][ C0] ? veth_xmit+0x42e/0xa30 [ 933.240498][ C0] ? dev_hard_start_xmit+0x269/0x790 [ 933.240516][ C0] ? __dev_queue_xmit+0x198c/0x3630 [ 933.240535][ C0] ? bond_start_xmit+0xe9f/0x1be0 [ 933.240558][ C0] ? dev_hard_start_xmit+0x269/0x790 [ 933.240576][ C0] ? __dev_queue_xmit+0x198c/0x3630 [ 933.240595][ C0] ? __bpf_tx_skb+0x181/0x260 [ 933.240636][ C0] ? bpf_clone_redirect+0x315/0x4a0 [ 933.240679][ C0] ? bpf_prog_ef75413035540f6e+0x21/0x25 [ 933.240693][ C0] ? bpf_test_run+0x2df/0x870 [ 933.240749][ C0] ? bpf_prog_test_run_skb+0xdbb/0x18f0 [ 933.240766][ C0] ? bpf_prog_test_run+0x31f/0x390 [ 933.240782][ C0] ? __sys_bpf+0x49d/0x890 [ 933.240796][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 933.240809][ C0] ? do_syscall_64+0x55/0xb0 [ 933.240837][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 933.240857][ C0] kasan_save_free_info+0x28/0x40 [ 933.240876][ C0] ____kasan_slab_free+0x126/0x1f0 [ 933.240894][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 933.240911][ C0] ? skb_release_data+0x609/0x7f0 [ 933.240926][ C0] __kmem_cache_free+0xba/0x1f0 [ 933.240948][ C0] skb_release_data+0x609/0x7f0 [ 933.240968][ C0] kfree_skb_reason+0x10e/0x170 [ 933.240984][ C0] __dev_forward_skb2+0x546/0x770 [ 933.241001][ C0] ? __dev_forward_skb+0x12/0x30 [ 933.241025][ C0] veth_xmit+0x42e/0xa30 [ 933.241043][ C0] ? veth_xmit+0x61/0xa30 [ 933.241064][ C0] dev_hard_start_xmit+0x269/0x790 [ 933.241088][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 933.241108][ C0] __dev_queue_xmit+0x198c/0x3630 [ 933.241128][ C0] ? verify_lock_unused+0x140/0x140 [ 933.241145][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 933.241166][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 933.241189][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 933.241208][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 933.241229][ C0] ? netdev_lower_get_next_private_rcu+0x9f/0xf0 [ 933.241253][ C0] ? bond_get_slave_by_id+0x551/0x560 [ 933.241274][ C0] ? bond_xmit_roundrobin_slave_get+0x440/0x440 [ 933.241300][ C0] bond_start_xmit+0xe9f/0x1be0 [ 933.241321][ C0] ? bond_start_xmit+0x119/0x1be0 [ 933.241340][ C0] ? bond_close+0x720/0x720 [ 933.241358][ C0] ? unwind_get_return_address+0x91/0xc0 [ 933.241374][ C0] ? validate_xmit_xfrm+0xbb/0x1340 [ 933.241433][ C0] ? xfrm_init_replay+0x2a0/0x2a0 [ 933.241449][ C0] ? passthru_features_check+0x20/0x20 [ 933.241474][ C0] dev_hard_start_xmit+0x269/0x790 [ 933.241498][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 933.241518][ C0] __dev_queue_xmit+0x198c/0x3630 [ 933.241540][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 933.241564][ C0] ? lock_chain_count+0x20/0x20 [ 933.241581][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 933.241600][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 933.241617][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 933.241638][ C0] ? skb_release_data+0x1de/0x7f0 [ 933.241658][ C0] ? __bpf_redirect+0x8c2/0xdf0 [ 933.241678][ C0] __bpf_tx_skb+0x181/0x260 [ 933.241696][ C0] bpf_clone_redirect+0x315/0x4a0 [ 933.241720][ C0] bpf_prog_ef75413035540f6e+0x21/0x25 [ 933.241734][ C0] bpf_test_run+0x2df/0x870 [ 933.241756][ C0] ? bpf_test_run+0x174/0x870 [ 933.241774][ C0] ? dst_hold+0x70/0x70 [ 933.241791][ C0] ? eth_get_headlen+0x210/0x210 [ 933.241837][ C0] ? convert___skb_to_skb+0x3d/0x590 [ 933.241855][ C0] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 933.241881][ C0] ? cpu_online+0x60/0x60 [ 933.241897][ C0] bpf_prog_test_run+0x31f/0x390 [ 933.241915][ C0] __sys_bpf+0x49d/0x890 [ 933.241931][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 933.241953][ C0] ? lock_chain_count+0x20/0x20 [ 933.241972][ C0] __x64_sys_bpf+0x7c/0x90 [ 933.241987][ C0] do_syscall_64+0x55/0xb0 [ 933.242001][ C0] ? clear_bhb_loop+0x40/0x90 [ 933.242017][ C0] ? clear_bhb_loop+0x40/0x90 [ 933.242038][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 933.242054][ C0] RIP: 0033:0x7f791259e0d9 [ 933.242066][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.242078][ C0] RSP: 002b:00007f79133ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 933.242093][ C0] RAX: ffffffffffffffda RBX: 00007f7912825fa0 RCX: 00007f791259e0d9 [ 933.242104][ C0] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 933.242113][ C0] RBP: 00007f7912635024 R08: 0000000000000000 R09: 0000000000000000 [ 933.242123][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.242132][ C0] R13: 00007f7912826038 R14: 00007f7912825fa0 R15: 00007ffc56b50e48 [ 933.242148][ C0] [ 934.151410][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 934.158427][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 934.165635][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.175702][ T28] Call Trace: [ 934.178992][ T28] [ 934.181934][ T28] dump_stack_lvl+0x18c/0x250 [ 934.186639][ T28] ? show_regs_print_info+0x20/0x20 [ 934.191853][ T28] ? load_image+0x420/0x420 [ 934.196382][ T28] panic+0x2ca/0x720 [ 934.200286][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 934.204784][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 934.210326][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 934.215696][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 934.221851][ T28] watchdog+0xf98/0xfa0 [ 934.226004][ T28] ? watchdog+0x1e1/0xfa0 [ 934.230336][ T28] kthread+0x2fa/0x390 [ 934.234395][ T28] ? hungtask_pm_notify+0x50/0x50 [ 934.239412][ T28] ? kthread_blkcg+0xd0/0xd0 [ 934.243991][ T28] ret_from_fork+0x48/0x80 [ 934.248400][ T28] ? kthread_blkcg+0xd0/0xd0 [ 934.252979][ T28] ret_from_fork_asm+0x11/0x20 [ 934.257747][ T28] [ 934.261001][ T28] Kernel Offset: disabled [ 934.265324][ T28] Rebooting in 86400 seconds..