last executing test programs: 27m17.910094772s ago: executing program 2 (id=156): socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86"], 0xfe1b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0x9, "206a77bdd1a004"}]}}}], 0x98}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000100)}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r5 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x25, 0x3, 0xdec0, &(0x7f0000000000)) sendmsg$kcm(r5, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x10d}], 0x10}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[], 0x50) socket$kcm(0x10, 0x400000002, 0x0) 27m15.382045412s ago: executing program 2 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27m14.991228132s ago: executing program 2 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 27m14.731161079s ago: executing program 2 (id=163): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x60000000}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80), 0xc) socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001980)="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", 0xff8}], 0x1}, 0x3eb) 27m14.253191553s ago: executing program 2 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000010c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_int(r4, &(0x7f0000001000)='io.weight\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f00000000c0)='%d\xf1%\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x4, 0x9, 0x3, 0x0, 0x7, 0x84004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x101011, 0x400, 0x3, 0x6, 0x7, 0x1, 0x101, 0x0, 0xff, 0x0, 0x2bc}, r4, 0xf, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8910, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x80000001, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\n\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01010001000000000000be2fc52364b885e200"/28], 0x50) close(0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130013710ff"}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}) 27m13.408979026s ago: executing program 2 (id=173): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc1200, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x408, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x80, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESOCT=r3, @ANYRES8=r4], 0x9a) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x2, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa}, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000800)=0x200000000000fff9) syz_clone(0x27283d80, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1) 26m58.055217385s ago: executing program 32 (id=173): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc1200, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x408, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x80, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESOCT=r3, @ANYRES8=r4], 0x9a) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x2, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa}, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000800)=0x200000000000fff9) syz_clone(0x27283d80, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1) 17.854473012s ago: executing program 4 (id=7331): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32], 0xfe33) 16.513905188s ago: executing program 4 (id=7343): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r0, 0x2, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 16.219105956s ago: executing program 4 (id=7337): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.897570345s ago: executing program 4 (id=7338): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) 15.548704164s ago: executing program 4 (id=7341): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0xffff0f00}]}, {0x0, [0x61, 0x2e, 0x2e]}}, 0x0, 0x2d}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) 14.871460102s ago: executing program 4 (id=7342): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af3", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0), 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000014eed5307b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018670000010000000000000007000000c45a0c00fcffffff85000000b600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800005a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x3, 0xe8, &(0x7f0000000b00)=""/232, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x10, 0x530e, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d40)=[r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000d80)=[{0x5, 0x4, 0x5, 0x4}, {0x2, 0x1, 0xc, 0x1}, {0x0, 0x5, 0xd}, {0x3, 0x403, 0x2, 0x4}, {0x3, 0x4, 0xe}, {0x4, 0x3, 0xe, 0xa}, {0x1, 0x3, 0xa, 0xb}, {0x5, 0x2, 0x8000d}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="956088fe00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 11.724368247s ago: executing program 3 (id=7356): r0 = socket$kcm(0x11, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000006c0), 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf55}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c670000000000"], 0x98}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff83}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) socket$kcm(0x10, 0x2, 0x10) 9.902815495s ago: executing program 3 (id=7359): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x94, 0xffffffffffffff34, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f0000000100)='\x00', 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x280, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0x37, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf2}, 0x48) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x703000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000380)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x6938, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)='dB', 0x2}], 0x1}, 0x22044880) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}, 0x8040) syz_clone(0x400, &(0x7f0000000840)="f2a2ffd73f51121bd9a326d5e239f9d75a4fa523e7dd727cd5eaa0214d3f22a734021a265e9485a4279f5ef837ffe74cb752f224ee018a751d5ba804b828ca9afccbeb6db1cd7bfbd2a8428a8cde6cdfa03991ca9d40d40f3019397b265dfa42c36d3c9c6fea4f0aa92aac6b7e1c69e8d1a8c8dddb458dc526871426f02e61512fda59229760cc49de23fc9a38b1c8afefd5e244920371a0775c0e26e49198d5b51de3d32951650beb15356344d5212c58209e696d3c48ae1991", 0xba, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="3997cfd310dab8bf35ec06c83afb8e05306b407631e4b9d06bac8e225525fc30d0ea1645ad06f4d604db9793fa16916016859e0c1dac9e2cdf1d58c2499ef37d5234b05dc28e5d45d6dc8cb0f99a4aa69cf6376f145913b259874cba1e203b4a8a09cef0bd96ade90ea44ef495f610d157621517c0a02be04d3e3623dc7670c4e8081b0dd044745d1432ecffcb8d04926f2e7dd173d7") r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000740)='ns/mnt\x00') sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1}, 0x8054) getpid() 8.066743884s ago: executing program 1 (id=7364): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc0009000700069903000000b000030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 7.711113704s ago: executing program 0 (id=7365): perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x98, 0x2}, 0x8002, 0x6, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x703, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2, 0xf, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x257}, {0x0}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000593b2cbc828c92ba00000000000000000000000000000000000000d9842e3affe70c28269045628b1da3e165d8ac79f546e079f32d510efd0b5067d73aad9a974655a212153aa96efdbeace91d175aa2f914e4b0f2467dbeda84b1af2edea48264445d7f63e271dd8ed76f84bf7965d9c7c43dc3b288ee0b9e23b7c82b3d7bf402d389d23f8029e32875b535f5d887fa30ec9b75a6b2e4345690034f920a835a93400b31949fbbf0c9e40971cbb10dbfc1a3dcfc0d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x4, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d0494", 0x9}], 0x2}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x1004, 0xb44, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x11, 0x1b, &(0x7f0000000480)=ANY=[@ANYRES16=r7, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000020bf9ff04000000186200000c000000000000000c00000018120000", @ANYRES32=0x1, @ANYRES64=r1, @ANYRESDEC=r2, @ANYBLOB="601a953400000000b500000018690000090000000000000004000000bf91000001000000b7020000000000008500000084000000b7000000c5948e84871a0000"], &(0x7f0000001580)='syzkaller\x00', 0x23, 0x0, &(0x7f00000015c0), 0x41100, 0x14, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001b40)={0x1, 0x0, 0x4, 0x400}, 0x10, 0x0, r5, 0x1, 0x0, &(0x7f0000002200)=[{0x3, 0x2, 0x10}], 0x10, 0x2}, 0x94) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0xb, 0x0, 0x11) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) 6.751100469s ago: executing program 1 (id=7366): r0 = socket$kcm(0x11, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000006c0), 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf55}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c670000000000"], 0x98}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff83}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) socket$kcm(0x10, 0x2, 0x10) 6.075248848s ago: executing program 0 (id=7367): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x2, 0xbd05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x828, 0x8, 0x0, 0x0, 0xf65, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7fffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000001200)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100", 0x2d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40840) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) 5.138607172s ago: executing program 0 (id=7368): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r1], 0x48}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x246200, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$cgroup_freezer_state(r4, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRES16=r5], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000480)=r4, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 2.171660572s ago: executing program 3 (id=7369): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0xffff0f00}]}, {0x0, [0x61, 0x2e, 0x2e]}}, 0x0, 0x2d}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af3", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0), 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000014eed5307b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018670000010000000000000007000000c45a0c00fcffffff85000000b600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800005a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x3, 0xe8, &(0x7f0000000b00)=""/232, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x10, 0x530e, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d40)=[r6, r0, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000d80)=[{0x5, 0x4, 0x5, 0x4}, {0x2, 0x1, 0xc, 0x1}, {0x0, 0x5, 0xd}, {0x3, 0x403, 0x2, 0x4}, {0x3, 0x4, 0xe}, {0x4, 0x3, 0xe, 0xa}, {0x1, 0x3, 0xa, 0xb}, {0x5, 0x2, 0x8000d}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="956088fe00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.170710352s ago: executing program 0 (id=7376): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'rwm\x00'}, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8911, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0), 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r7}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="330000000420000000000000", @ANYRES32=r3, @ANYBLOB="1e32e8e3a0f6665ca0965562900600000000009ca158098a5dcc05153000"/50, @ANYRES64], 0x20) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 2.170347762s ago: executing program 1 (id=7370): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) 1.662252576s ago: executing program 1 (id=7371): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0xffff0f00}]}, {0x0, [0x61, 0x2e, 0x2e]}}, 0x0, 0x2d}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) 1.245280127s ago: executing program 1 (id=7372): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x3, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x182510, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYRES16=r3], 0x10) 1.187732028s ago: executing program 0 (id=7373): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x40802) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x10100) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x18, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100201, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r7, &(0x7f0000000000)="2c6ec5bafad163fdf2a42d57c5c0aed18cf4bd29573defb4c32a15cab2cd3b44c73288b584cbbea0a18f3f150a786336b1b6f3d136", &(0x7f0000000600)=""/207}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.028453003s ago: executing program 3 (id=7374): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0x1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="140000000400000004000000010000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ba00000000004b1000"/23], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0xdc, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 403.122869ms ago: executing program 3 (id=7375): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x2, 0xbd05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x828, 0x8, 0x0, 0x0, 0xf65, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7fffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000001200)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100", 0x2d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40840) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) 360.41991ms ago: executing program 1 (id=7377): r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r6 = socket$kcm(0x2, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000380)={r2, r4}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r8}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000780), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0xffffff91, 0x0}}, 0x10) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 192.660295ms ago: executing program 0 (id=7378): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x210}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0xfff5}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000027c0)="d8000000580081054e81f782db44b904021d260009000200e8fe15e90600142603600e120900210000007b81b4d383610656336d8870236f75235ebb108448c052", 0x41}], 0x1}, 0x24004880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911140000000000854f"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000026c0)=""/245, 0xf5}], 0x7}, 0x2002) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x20000042) r6 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0x4, 0x0, 0x6, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x105, 0x0, 0x5, 0x2, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 3 (id=7379): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) kernel console output (not intermixed with test programs): added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.544986][T27424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.555579][T27423] netlink: 'syz.4.6489': attribute type 39 has an invalid length. [ 1554.074395][T27433] netlink: 'syz.0.6491': attribute type 12 has an invalid length. [ 1554.082700][T27433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6491'. [ 1554.680420][T27438] pim6reg1: entered promiscuous mode [ 1554.723146][T27438] pim6reg1: entered allmulticast mode [ 1556.276060][T27445] netlink: 'syz.1.6497': attribute type 39 has an invalid length. [ 1556.339615][T27448] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6499'. [ 1556.356081][T27448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.360844][T27450] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1556.371128][T27448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.388932][T27448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.399616][T27448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.412502][T27448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.423139][T27448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.451459][T27450] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1556.466237][T27451] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1556.612593][T27453] netlink: 'syz.1.6500': attribute type 39 has an invalid length. [ 1556.848982][T27461] netlink: 'syz.3.6511': attribute type 39 has an invalid length. [ 1558.338669][T27484] netlink: 'syz.1.6508': attribute type 39 has an invalid length. [ 1558.343218][T27488] netlink: 'syz.0.6510': attribute type 1 has an invalid length. [ 1558.399203][T27488] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.6510'. [ 1558.509805][T27487] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6509'. [ 1558.604430][T27487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.619260][T27487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.644776][T27487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.674469][T27487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.688033][T27487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.734705][T27487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.773457][T27487] batadv_slave_1: entered promiscuous mode [ 1558.877570][T27492] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6512'. [ 1558.890117][T27492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.902920][T27492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.923737][T27492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.935154][T27492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.945549][T27492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.958308][T27492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.971235][T27494] netlink: 'syz.1.6515': attribute type 22 has an invalid length. [ 1558.984734][T27494] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.6515'. [ 1559.782479][T27517] netlink: 'syz.0.6523': attribute type 39 has an invalid length. [ 1559.908035][T27520] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6524'. [ 1559.927424][T27520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.941868][T27520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.957857][T27520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.973229][T27520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.986286][T27520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.997024][T27520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.724790][T27532] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6526'. [ 1560.764334][T27532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1560.781444][T27532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.792425][T27532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1560.809864][T27532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.820409][T27532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1560.834144][T27532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.295269][T27540] netlink: 'syz.4.6531': attribute type 25 has an invalid length. [ 1561.312584][T27540] netlink: 'syz.4.6531': attribute type 3 has an invalid length. [ 1561.331091][T27540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6531'. [ 1563.968854][T27550] netlink: 'syz.0.6533': attribute type 39 has an invalid length. [ 1564.007318][T27554] netlink: 'syz.1.6535': attribute type 10 has an invalid length. [ 1564.035817][T27554] team0: Port device dummy0 added [ 1564.114442][T27558] netlink: 'syz.3.6544': attribute type 39 has an invalid length. [ 1564.342791][T27565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6538'. [ 1564.370669][T27565] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6538'. [ 1564.431544][T27567] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1564.479042][T27567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.573745][T27567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.603603][T27567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.690693][T27567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.723886][T27567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.773755][T27567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.556353][T27586] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6543'. [ 1566.577980][T27586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1566.624145][T27586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.666627][T27586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1566.697910][T27586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.712954][T27586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1566.724671][T27586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.794534][T27591] netlink: 'syz.1.6546': attribute type 39 has an invalid length. [ 1567.084716][T27594] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6547'. [ 1567.099117][T27594] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1567.599057][T27609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.612069][T27609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.721083][T27609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.769876][T27609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.809977][T27619] netlink: 'syz.0.6556': attribute type 10 has an invalid length. [ 1568.958571][T27621] netlink: 'syz.4.6557': attribute type 39 has an invalid length. [ 1569.135241][T27626] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6558'. [ 1569.182675][T27626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.221618][T27626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.232360][T27626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.253608][T27626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.421806][T21503] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 1570.279055][T27636] netlink: 'syz.4.6561': attribute type 2 has an invalid length. [ 1570.512258][T27642] netlink: 'syz.1.6563': attribute type 3 has an invalid length. [ 1570.538313][T27642] netlink: 61203 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1570.564822][T27644] netlink: 'syz.0.6564': attribute type 3 has an invalid length. [ 1570.599307][T27644] netlink: 'syz.0.6564': attribute type 1 has an invalid length. [ 1570.612134][T27644] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1571.000828][T27654] netlink: 'syz.4.6569': attribute type 39 has an invalid length. [ 1571.051170][T27655] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6568'. [ 1571.098376][T27655] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1571.129315][T27655] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1571.465737][T21503] Bluetooth: hci4: command 0x0406 tx timeout [ 1574.513898][T21503] Bluetooth: hci1: unexpected event 0x31 length: 151 > 6 [ 1574.676472][T27671] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6572'. [ 1575.029413][T27674] netlink: 'syz.0.6575': attribute type 3 has an invalid length. [ 1575.056206][T27674] netlink: 61203 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1576.121124][T27684] netlink: 'syz.4.6579': attribute type 39 has an invalid length. [ 1576.451468][T27689] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6581'. [ 1576.569402][T27698] netlink: 'syz.1.6584': attribute type 10 has an invalid length. [ 1576.718207][T27696] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6583'. [ 1576.755953][T27701] netlink: 'syz.4.6585': attribute type 3 has an invalid length. [ 1576.783785][T27701] netlink: 61203 bytes leftover after parsing attributes in process `syz.4.6585'. [ 1576.968791][T27706] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.6587'. [ 1577.438807][T27711] netlink: 'syz.1.6590': attribute type 39 has an invalid length. [ 1577.958758][T27724] netlink: 'syz.1.6595': attribute type 3 has an invalid length. [ 1577.966936][T27724] netlink: 61203 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1577.980462][T27722] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1578.426657][T27732] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1578.785820][T27743] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1578.797185][T27747] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1578.885174][T27743] netlink: 'syz.3.6602': attribute type 2 has an invalid length. [ 1578.894186][T27743] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1579.384248][T27752] netlink: 'syz.4.6604': attribute type 39 has an invalid length. [ 1579.882668][T27761] netlink: 'syz.3.6606': attribute type 3 has an invalid length. [ 1583.440661][T27789] netlink: 'syz.4.6617': attribute type 3 has an invalid length. [ 1583.459185][T27789] __nla_validate_parse: 5 callbacks suppressed [ 1583.459205][T27789] netlink: 61155 bytes leftover after parsing attributes in process `syz.4.6617'. [ 1583.515287][T27795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6618'. [ 1583.546299][T27792] netlink: 'syz.0.6615': attribute type 39 has an invalid length. [ 1583.847908][T27801] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.6620'. [ 1584.678578][T27814] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6625'. [ 1584.813641][T27820] netlink: 'syz.4.6628': attribute type 3 has an invalid length. [ 1584.973922][T27820] netlink: 61155 bytes leftover after parsing attributes in process `syz.4.6628'. [ 1585.431754][T27826] netlink: 'syz.1.6630': attribute type 39 has an invalid length. [ 1585.642515][T27832] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6632'. [ 1586.085438][T27845] netlink: 'syz.1.6637': attribute type 3 has an invalid length. [ 1586.093367][T27845] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6637'. [ 1586.170699][T21503] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 1586.283802][T27848] netlink: 'syz.0.6645': attribute type 39 has an invalid length. [ 1587.761024][T27865] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6638'. [ 1587.779597][T27865] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1587.795489][T27865] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1587.907764][T27870] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6642'. [ 1588.052244][T27872] netlink: 'syz.3.6643': attribute type 39 has an invalid length. [ 1588.429781][T27879] netlink: 'syz.3.6646': attribute type 10 has an invalid length. [ 1588.608744][T27884] netlink: 'syz.4.6648': attribute type 3 has an invalid length. [ 1588.620145][T27884] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6648'. [ 1588.867865][T27889] netlink: 'syz.4.6650': attribute type 39 has an invalid length. [ 1588.950000][T27895] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6652'. [ 1589.177033][T27899] netlink: 'syz.4.6653': attribute type 39 has an invalid length. [ 1589.422954][T27893] netlink: 'syz.1.6651': attribute type 10 has an invalid length. [ 1589.453802][T27893] wlan1: mtu less than device minimum [ 1589.693443][T27912] netlink: 'syz.0.6658': attribute type 3 has an invalid length. [ 1589.712017][T27912] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6658'. [ 1589.967160][T27918] netlink: 'syz.4.6661': attribute type 39 has an invalid length. [ 1590.200382][T27922] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.6662'. [ 1590.342627][T27927] netlink: 'syz.4.6664': attribute type 39 has an invalid length. [ 1591.059751][T27947] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1591.134138][T27947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.164171][T27947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.186549][T27947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1591.312932][T27947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.412573][T27943] netlink: 'syz.0.6668': attribute type 10 has an invalid length. [ 1591.581082][T27950] FAULT_INJECTION: forcing a failure. [ 1591.581082][T27950] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.598788][T27950] CPU: 0 PID: 27950 Comm: syz.4.6672 Not tainted syzkaller #0 [ 1591.606327][T27950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1591.616489][T27950] Call Trace: [ 1591.619799][T27950] [ 1591.622756][T27950] dump_stack_lvl+0x18c/0x250 [ 1591.627489][T27950] ? show_regs_print_info+0x20/0x20 [ 1591.632718][T27950] ? load_image+0x420/0x420 [ 1591.637243][T27950] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1591.643251][T27950] ? __asan_memset+0x22/0x40 [ 1591.647866][T27950] should_fail_ex+0x39d/0x4d0 [ 1591.652596][T27950] should_failslab+0x9/0x20 [ 1591.657302][T27950] slab_pre_alloc_hook+0x59/0x310 [ 1591.662615][T27950] ? __debug_object_init+0xec/0x450 [ 1591.667879][T27950] kmem_cache_alloc+0x5a/0x2d0 [ 1591.672698][T27950] ? slab_build_skb+0x2b/0x3f0 [ 1591.677627][T27950] slab_build_skb+0x2b/0x3f0 [ 1591.682273][T27950] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 1591.687686][T27950] ? __fget_files+0x28/0x4b0 [ 1591.692310][T27950] ? __fget_files+0x28/0x4b0 [ 1591.696951][T27950] ? __fget_files+0x43d/0x4b0 [ 1591.701685][T27950] ? cpu_online+0x60/0x60 [ 1591.706141][T27950] bpf_prog_test_run+0x321/0x390 [ 1591.711208][T27950] __sys_bpf+0x49d/0x890 [ 1591.715524][T27950] ? bpf_link_show_fdinfo+0x390/0x390 [ 1591.720933][T27950] ? lock_chain_count+0x20/0x20 [ 1591.725829][T27950] __x64_sys_bpf+0x7c/0x90 [ 1591.730269][T27950] do_syscall_64+0x55/0xa0 [ 1591.734963][T27950] ? clear_bhb_loop+0x40/0x90 [ 1591.739661][T27950] ? clear_bhb_loop+0x40/0x90 [ 1591.744459][T27950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.750387][T27950] RIP: 0033:0x7f97c7b9cdd9 [ 1591.754937][T27950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.774660][T27950] RSP: 002b:00007f97c89d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1591.783115][T27950] RAX: ffffffffffffffda RBX: 00007f97c7e15fa0 RCX: 00007f97c7b9cdd9 [ 1591.791103][T27950] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 1591.799182][T27950] RBP: 00007f97c89d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.807177][T27950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.815166][T27950] R13: 00007f97c7e16038 R14: 00007f97c7e15fa0 R15: 00007ffdcfb73d08 [ 1591.823169][T27950] [ 1591.846770][T27949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.909574][T27953] netlink: 'syz.0.6673': attribute type 39 has an invalid length. [ 1592.074916][T27957] netlink: 'syz.4.6674': attribute type 39 has an invalid length. [ 1592.275227][T27923] Bluetooth: hci0: command 0x0406 tx timeout [ 1592.541974][T27965] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6676'. [ 1593.886432][T27980] team0: Port device wlan1 added [ 1593.912363][T27976] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1594.300561][T27976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1594.316245][T27976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1594.331183][T27988] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1594.582250][T27988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.594246][T27988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.604348][T27988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.615434][T27988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.625904][T27991] validate_nla: 3 callbacks suppressed [ 1594.625925][T27991] netlink: 'syz.3.6684': attribute type 39 has an invalid length. [ 1594.644890][T27996] netlink: 'syz.4.6686': attribute type 3 has an invalid length. [ 1594.659796][T27997] netlink: 'syz.1.6685': attribute type 39 has an invalid length. [ 1594.663007][T27996] netlink: 'syz.4.6686': attribute type 1 has an invalid length. [ 1594.677585][T27996] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6686'. [ 1595.103994][T28004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6688'. [ 1595.798372][T28002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6688'. [ 1596.071986][T28023] FAULT_INJECTION: forcing a failure. [ 1596.071986][T28023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.121290][T28023] CPU: 0 PID: 28023 Comm: syz.3.6695 Not tainted syzkaller #0 [ 1596.128864][T28023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1596.138969][T28023] Call Trace: [ 1596.142381][T28023] [ 1596.145361][T28023] dump_stack_lvl+0x18c/0x250 [ 1596.150152][T28023] ? show_regs_print_info+0x20/0x20 [ 1596.155703][T28023] ? load_image+0x420/0x420 [ 1596.155736][T28027] netlink: 'syz.4.6697': attribute type 3 has an invalid length. [ 1596.160269][T28023] ? __might_fault+0xaa/0x120 [ 1596.160312][T28023] ? __lock_acquire+0x7d40/0x7d40 [ 1596.169426][T28027] netlink: 'syz.4.6697': attribute type 1 has an invalid length. [ 1596.172766][T28023] should_fail_ex+0x39d/0x4d0 [ 1596.190423][T28023] _copy_from_iter+0x1d9/0x12e0 [ 1596.195339][T28023] ? rep_movs_alternative+0x4a/0x90 [ 1596.200685][T28023] ? _copy_from_iter+0x24e/0x12e0 [ 1596.205757][T28023] ? __virt_addr_valid+0x18c/0x540 [ 1596.210921][T28023] ? __lock_acquire+0x7d40/0x7d40 [ 1596.215998][T28023] ? copyout_mc+0x70/0x70 [ 1596.220476][T28023] ? copyout_mc+0x70/0x70 [ 1596.224858][T28023] ? __virt_addr_valid+0x18c/0x540 [ 1596.230024][T28023] ? page_copy_sane+0x16a/0x270 [ 1596.234993][T28023] copy_page_from_iter+0x7b/0x100 [ 1596.240078][T28023] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1596.245969][T28023] tun_get_user+0x15db/0x3ca0 [ 1596.250946][T28023] ? aa_file_perm+0x11b/0xee0 [ 1596.255694][T28023] ? rcu_read_unlock+0xa0/0xa0 [ 1596.260597][T28023] ? tun_get+0x1c/0x2e0 [ 1596.264894][T28023] ? __lock_acquire+0x7d40/0x7d40 [ 1596.270001][T28023] ? tun_get+0x1c/0x2e0 [ 1596.274230][T28023] tun_chr_write_iter+0x119/0x200 [ 1596.279314][T28023] vfs_write+0x46c/0x990 [ 1596.283619][T28023] ? file_end_write+0x250/0x250 [ 1596.288530][T28023] ? __fget_files+0x43d/0x4b0 [ 1596.293276][T28023] ? __fdget_pos+0x1d8/0x330 [ 1596.297929][T28023] ? ksys_write+0x75/0x260 [ 1596.302398][T28023] ksys_write+0x150/0x260 [ 1596.306886][T28023] ? __ia32_sys_read+0x90/0x90 [ 1596.311930][T28023] ? lockdep_hardirqs_on+0x98/0x150 [ 1596.317224][T28023] do_syscall_64+0x55/0xa0 [ 1596.321708][T28023] ? clear_bhb_loop+0x40/0x90 [ 1596.326445][T28023] ? clear_bhb_loop+0x40/0x90 [ 1596.331179][T28023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.337121][T28023] RIP: 0033:0x7f5078d9cdd9 [ 1596.341592][T28023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.361853][T28023] RSP: 002b:00007f5079c2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1596.370410][T28023] RAX: ffffffffffffffda RBX: 00007f5079015fa0 RCX: 00007f5078d9cdd9 [ 1596.378604][T28023] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 1596.386797][T28023] RBP: 00007f5079c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.394816][T28023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1596.403007][T28023] R13: 00007f5079016038 R14: 00007f5079015fa0 R15: 00007ffefd996598 [ 1596.411237][T28023] [ 1596.426474][T28027] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6697'. [ 1596.558455][T28025] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6696'. [ 1596.772319][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.813764][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.826579][T28025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.840497][T28025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.907202][T28028] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6694'. [ 1596.926017][T28031] netlink: 'syz.3.6698': attribute type 39 has an invalid length. [ 1596.940597][T28035] netlink: 'syz.4.6699': attribute type 39 has an invalid length. [ 1597.168810][T28044] FAULT_INJECTION: forcing a failure. [ 1597.168810][T28044] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.181555][T28044] CPU: 1 PID: 28044 Comm: syz.1.6702 Not tainted syzkaller #0 [ 1597.189064][T28044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1597.199173][T28044] Call Trace: [ 1597.202499][T28044] [ 1597.205483][T28044] dump_stack_lvl+0x18c/0x250 [ 1597.210232][T28044] ? show_regs_print_info+0x20/0x20 [ 1597.215505][T28044] ? load_image+0x420/0x420 [ 1597.220056][T28044] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1597.225732][T28044] ? netdev_core_pick_tx+0x340/0x340 [ 1597.231079][T28044] should_fail_ex+0x39d/0x4d0 [ 1597.235833][T28044] should_failslab+0x9/0x20 [ 1597.240397][T28044] slab_pre_alloc_hook+0x59/0x310 [ 1597.245478][T28044] kmem_cache_alloc+0x5a/0x2d0 [ 1597.250292][T28044] ? skb_clone+0x1eb/0x370 [ 1597.254799][T28044] skb_clone+0x1eb/0x370 [ 1597.259099][T28044] bpf_clone_redirect+0x167/0x4a0 [ 1597.264366][T28044] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 1597.269967][T28044] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1597.276260][T28044] ? lock_chain_count+0x20/0x20 [ 1597.281158][T28044] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1597.287182][T28044] ? lockdep_softirqs_on+0x580/0x580 [ 1597.292492][T28044] ? lock_chain_count+0x20/0x20 [ 1597.297513][T28044] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1597.303784][T28044] ? __local_bh_disable_ip+0x108/0x1a0 [ 1597.309269][T28044] ? __cant_sleep+0x220/0x220 [ 1597.314147][T28044] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1597.319536][T28044] ? _local_bh_enable+0xa0/0xa0 [ 1597.324414][T28044] ? bpf_test_timer_continue+0x135/0x380 [ 1597.330072][T28044] ? bpf_test_run+0x174/0x870 [ 1597.334771][T28044] bpf_test_run+0x2df/0x870 [ 1597.339333][T28044] ? bpf_test_run+0x174/0x870 [ 1597.344040][T28044] ? convert___skb_to_skb+0x590/0x590 [ 1597.349438][T28044] ? eth_get_headlen+0x210/0x210 [ 1597.354405][T28044] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 1597.359971][T28044] ? convert___skb_to_skb+0x3d/0x590 [ 1597.365281][T28044] bpf_prog_test_run_skb+0xad2/0x12b0 [ 1597.370696][T28044] ? cpu_online+0x60/0x60 [ 1597.375056][T28044] bpf_prog_test_run+0x321/0x390 [ 1597.380015][T28044] __sys_bpf+0x49d/0x890 [ 1597.384285][T28044] ? bpf_link_show_fdinfo+0x390/0x390 [ 1597.389694][T28044] ? lock_chain_count+0x20/0x20 [ 1597.394670][T28044] __x64_sys_bpf+0x7c/0x90 [ 1597.399113][T28044] do_syscall_64+0x55/0xa0 [ 1597.403552][T28044] ? clear_bhb_loop+0x40/0x90 [ 1597.408338][T28044] ? clear_bhb_loop+0x40/0x90 [ 1597.413037][T28044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.418950][T28044] RIP: 0033:0x7f64cd59cdd9 [ 1597.423478][T28044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.443112][T28044] RSP: 002b:00007f64ce38c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1597.451559][T28044] RAX: ffffffffffffffda RBX: 00007f64cd815fa0 RCX: 00007f64cd59cdd9 [ 1597.459637][T28044] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1597.467631][T28044] RBP: 00007f64ce38c090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.475673][T28044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1597.483842][T28044] R13: 00007f64cd816038 R14: 00007f64cd815fa0 R15: 00007ffdc7c33e18 [ 1597.492041][T28044] [ 1598.005881][T28060] netlink: 'syz.0.6707': attribute type 3 has an invalid length. [ 1598.018052][T28060] netlink: 'syz.0.6707': attribute type 1 has an invalid length. [ 1598.034217][T28060] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6707'. [ 1598.908999][T28089] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6718'. [ 1598.928615][T28090] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1599.320818][T28095] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6727'. [ 1600.438733][T28108] validate_nla: 6 callbacks suppressed [ 1600.438756][T28108] netlink: 'syz.4.6723': attribute type 39 has an invalid length. [ 1601.262795][T28123] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.6729'. [ 1601.370587][T28127] netlink: 'syz.0.6730': attribute type 3 has an invalid length. [ 1601.391612][T28128] netlink: 'syz.1.6731': attribute type 5 has an invalid length. [ 1601.399836][T28127] netlink: 'syz.0.6730': attribute type 1 has an invalid length. [ 1601.414236][T28127] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6730'. [ 1601.510996][T28128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6731'. [ 1601.520330][T28128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6731'. [ 1601.533138][T28128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6731'. [ 1605.767849][T28169] netlink: 'syz.1.6740': attribute type 3 has an invalid length. [ 1605.803675][T28169] netlink: 'syz.1.6740': attribute type 1 has an invalid length. [ 1605.822489][T28169] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1605.970106][T28171] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.6742'. [ 1606.711928][T28180] netlink: 'syz.1.6746': attribute type 10 has an invalid length. [ 1607.424122][T28180] team0: Port device geneve1 added [ 1607.683853][T28192] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1607.740501][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.752037][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.756338][T28192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.769205][T28192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.804322][T28201] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.6752'. [ 1607.813458][T28192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.834239][T28192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.850504][T28199] netlink: 'syz.1.6751': attribute type 3 has an invalid length. [ 1607.871598][T28199] netlink: 'syz.1.6751': attribute type 1 has an invalid length. [ 1607.880073][T28199] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6751'. [ 1607.927504][T28202] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.6753'. [ 1608.381312][T28210] netlink: 'syz.0.6755': attribute type 21 has an invalid length. [ 1608.395370][T28210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6755'. [ 1608.458157][T28207] netlink: 'syz.1.6762': attribute type 3 has an invalid length. [ 1608.480744][T28207] netlink: 'syz.1.6762': attribute type 1 has an invalid length. [ 1608.524326][T28207] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6762'. [ 1609.581597][T28233] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6763'. [ 1609.599855][T28233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1609.612490][T28233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.628473][T28233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1609.653652][T28233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.578414][T28229] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1610.792994][T28243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.805561][T28243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.817214][T28243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.836870][T28243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.885316][T28247] __nla_validate_parse: 1 callbacks suppressed [ 1610.885337][T28247] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.6766'. [ 1611.019629][T28229] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1611.183420][T28229] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1611.191807][T28229] CPU: 0 PID: 28229 Comm: syz.0.6761 Not tainted syzkaller #0 [ 1611.199348][T28229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1611.209470][T28229] Call Trace: [ 1611.212809][T28229] [ 1611.215821][T28229] dump_stack_lvl+0x18c/0x250 [ 1611.220571][T28229] ? show_regs_print_info+0x20/0x20 [ 1611.225840][T28229] ? load_image+0x420/0x420 [ 1611.230573][T28229] sysfs_warn_dup+0x8e/0xa0 [ 1611.235113][T28229] sysfs_do_create_link_sd+0xc0/0x110 [ 1611.240550][T28229] device_add_class_symlinks+0x1cf/0x240 [ 1611.246222][T28229] device_add+0x507/0xc20 [ 1611.250602][T28229] wiphy_register+0x1dad/0x2ae0 [ 1611.255798][T28229] ? cfg80211_event_work+0x40/0x40 [ 1611.260937][T28229] ? minstrel_ht_alloc+0x88a/0x990 [ 1611.266095][T28229] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1611.272193][T28229] ieee80211_register_hw+0x3464/0x4250 [ 1611.277873][T28229] ? ieee80211_tasklet_handler+0x20/0x20 [ 1611.283539][T28229] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1611.289463][T28229] ? __debug_object_init+0xec/0x450 [ 1611.294779][T28229] ? __asan_memset+0x22/0x40 [ 1611.299399][T28229] ? __hrtimer_init+0x186/0x270 [ 1611.304276][T28229] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1611.310041][T28229] ? mac80211_hwsim_free+0x220/0x220 [ 1611.315345][T28229] ? rcu_is_watching+0x15/0xb0 [ 1611.320142][T28229] ? kstrndup+0xbd/0x140 [ 1611.324423][T28229] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1611.329563][T28229] ? __nla_validate+0x50/0x50 [ 1611.334275][T28229] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1611.340723][T28229] ? __nla_parse+0x40/0x50 [ 1611.345169][T28229] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1611.351527][T28229] genl_family_rcv_msg_doit+0x211/0x310 [ 1611.357099][T28229] ? end_current_label_crit_section+0x170/0x170 [ 1611.363385][T28229] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1611.369309][T28229] ? bpf_lsm_capable+0x9/0x10 [ 1611.374080][T28229] ? security_capable+0x89/0xb0 [ 1611.378967][T28229] genl_rcv_msg+0x619/0x7a0 [ 1611.383506][T28229] ? genl_bind+0x360/0x360 [ 1611.387943][T28229] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1611.394295][T28229] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1611.400967][T28229] netlink_rcv_skb+0x241/0x4d0 [ 1611.405866][T28229] ? genl_bind+0x360/0x360 [ 1611.410317][T28229] ? netlink_ack+0x1180/0x1180 [ 1611.415140][T28229] ? __lock_acquire+0x7d40/0x7d40 [ 1611.420214][T28229] ? down_read+0x1ac/0x2e0 [ 1611.424669][T28229] genl_rcv+0x28/0x40 [ 1611.428685][T28229] netlink_unicast+0x751/0x8d0 [ 1611.433509][T28229] netlink_sendmsg+0x8d0/0xbf0 [ 1611.438333][T28229] ? netlink_getsockopt+0x590/0x590 [ 1611.443582][T28229] ? aa_sock_msg_perm+0x94/0x150 [ 1611.448900][T28229] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1611.454207][T28229] ? security_socket_sendmsg+0x80/0xa0 [ 1611.459689][T28229] ? netlink_getsockopt+0x590/0x590 [ 1611.465011][T28229] ____sys_sendmsg+0x5ba/0x960 [ 1611.469804][T28229] ? __asan_memset+0x22/0x40 [ 1611.474425][T28229] ? __sys_sendmsg_sock+0x30/0x30 [ 1611.479501][T28229] ? __import_iovec+0x5f2/0x850 [ 1611.484421][T28229] ? import_iovec+0x73/0xa0 [ 1611.489566][T28229] ___sys_sendmsg+0x2a6/0x360 [ 1611.494428][T28229] ? raw_spin_rq_unlock_irq+0xc/0x90 [ 1611.499752][T28229] ? __sys_sendmsg+0x2a0/0x2a0 [ 1611.504629][T28229] __se_sys_sendmsg+0x1c2/0x2b0 [ 1611.509511][T28229] ? __x64_sys_sendmsg+0x80/0x80 [ 1611.514492][T28229] ? lockdep_hardirqs_on+0x98/0x150 [ 1611.519723][T28229] do_syscall_64+0x55/0xa0 [ 1611.524164][T28229] ? clear_bhb_loop+0x40/0x90 [ 1611.528868][T28229] ? clear_bhb_loop+0x40/0x90 [ 1611.533584][T28229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1611.539515][T28229] RIP: 0033:0x7f0aa2f9cdd9 [ 1611.544046][T28229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.563848][T28229] RSP: 002b:00007f0aa11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.572287][T28229] RAX: ffffffffffffffda RBX: 00007f0aa3215fa0 RCX: 00007f0aa2f9cdd9 [ 1611.580313][T28229] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1611.588335][T28229] RBP: 00007f0aa3032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1611.596347][T28229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1611.604521][T28229] R13: 00007f0aa3216038 R14: 00007f0aa3215fa0 R15: 00007ffc4b688678 [ 1611.612542][T28229] [ 1611.763012][T28255] netlink: 'syz.3.6769': attribute type 21 has an invalid length. [ 1611.807032][T28257] netlink: 'syz.4.6768': attribute type 3 has an invalid length. [ 1611.835362][T28257] netlink: 'syz.4.6768': attribute type 1 has an invalid length. [ 1611.880079][T28257] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6768'. [ 1612.004211][T28264] netlink: 'syz.0.6771': attribute type 39 has an invalid length. [ 1613.196866][T28282] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1613.222874][T28283] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6776'. [ 1613.635619][T28292] netlink: 'syz.0.6778': attribute type 10 has an invalid length. [ 1613.700430][T28294] netlink: 'syz.1.6781': attribute type 3 has an invalid length. [ 1613.747672][T28294] netlink: 'syz.1.6781': attribute type 1 has an invalid length. [ 1613.770534][T28294] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1614.166840][T28307] netlink: 'syz.0.6786': attribute type 7 has an invalid length. [ 1614.216845][T28311] netlink: 'syz.1.6788': attribute type 39 has an invalid length. [ 1614.439855][T28317] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.6789'. [ 1615.126801][T28322] netlink: 'syz.3.6792': attribute type 3 has an invalid length. [ 1615.166143][T28322] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6792'. [ 1616.014572][T28333] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6794'. [ 1616.134965][T28333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.215243][T28333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.288179][T28333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.307548][T28338] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6797'. [ 1616.357374][T28333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.384361][T28342] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1619.547179][T28355] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.6810'. [ 1619.598274][T28357] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6802'. [ 1619.661362][T28357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1619.701912][T28357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1619.722371][T28357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1619.733434][T28357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1620.868755][T28383] validate_nla: 1 callbacks suppressed [ 1620.868778][T28383] netlink: 'syz.4.6809': attribute type 39 has an invalid length. [ 1621.130072][T28381] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6808'. [ 1621.169294][T28381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.185914][T28381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1621.206965][T28381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1621.238819][T28381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.287268][T28418] netlink: 'syz.0.6824': attribute type 39 has an invalid length. [ 1622.560764][T28420] netlink: 'syz.4.6825': attribute type 10 has an invalid length. [ 1622.592611][T28420] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6825'. [ 1623.167992][T28442] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6829'. [ 1623.185110][T28442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.199673][T28442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.212313][T28442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.238424][T28442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.147063][T28465] netlink: 'syz.1.6837': attribute type 39 has an invalid length. [ 1624.314395][T28468] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1624.338080][T28468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1624.374407][T28468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.420817][T28468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1624.450084][T28468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1624.862752][T28475] syzkaller0: entered promiscuous mode [ 1624.886828][T28475] syzkaller0: entered allmulticast mode [ 1626.272552][T28501] FAULT_INJECTION: forcing a failure. [ 1626.272552][T28501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1626.307276][T28501] CPU: 0 PID: 28501 Comm: syz.0.6848 Not tainted syzkaller #0 [ 1626.314827][T28501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1626.324948][T28501] Call Trace: [ 1626.328269][T28501] [ 1626.331237][T28501] dump_stack_lvl+0x18c/0x250 [ 1626.336061][T28501] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.342262][T28501] ? show_regs_print_info+0x20/0x20 [ 1626.347495][T28501] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.353741][T28501] should_fail_ex+0x39d/0x4d0 [ 1626.358500][T28501] _copy_from_user+0x2f/0xe0 [ 1626.363238][T28501] __sys_bpf+0x23e/0x890 [ 1626.367545][T28501] ? bpf_link_show_fdinfo+0x390/0x390 [ 1626.372975][T28501] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.379259][T28501] __x64_sys_bpf+0x7c/0x90 [ 1626.383726][T28501] do_syscall_64+0x55/0xa0 [ 1626.388183][T28501] ? clear_bhb_loop+0x40/0x90 [ 1626.392907][T28501] ? clear_bhb_loop+0x40/0x90 [ 1626.397639][T28501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.403665][T28501] RIP: 0033:0x7f0aa2f9cdd9 [ 1626.408124][T28501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.427951][T28501] RSP: 002b:00007f0aa11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1626.436393][T28501] RAX: ffffffffffffffda RBX: 00007f0aa3215fa0 RCX: 00007f0aa2f9cdd9 [ 1626.444386][T28501] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1626.452382][T28501] RBP: 00007f0aa11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.460452][T28501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.468434][T28501] R13: 00007f0aa3216038 R14: 00007f0aa3215fa0 R15: 00007ffc4b688678 [ 1626.476438][T28501] [ 1626.809367][T28512] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1626.839981][T28512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.870417][T28512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.884781][T28512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.920762][T28512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.941487][T28511] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6851'. [ 1626.952095][T28511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.969563][T28511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.987290][T28511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1627.011755][T28511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.737041][T28542] netlink: 'syz.0.6860': attribute type 10 has an invalid length. [ 1628.771287][T28542] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6860'. [ 1629.172812][T28547] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1630.022273][T28561] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6867'. [ 1630.144109][T28561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.184050][T28561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.325313][T28561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1630.613313][T28561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.852367][T28530] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6858'. [ 1630.944501][T28530] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1630.953174][T28530] CPU: 1 PID: 28530 Comm: syz.1.6858 Not tainted syzkaller #0 [ 1630.960791][T28530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1630.970906][T28530] Call Trace: [ 1630.974240][T28530] [ 1630.977226][T28530] dump_stack_lvl+0x18c/0x250 [ 1630.982070][T28530] ? show_regs_print_info+0x20/0x20 [ 1630.987493][T28530] ? load_image+0x420/0x420 [ 1630.992054][T28530] sysfs_warn_dup+0x8e/0xa0 [ 1630.996667][T28530] sysfs_do_create_link_sd+0xc0/0x110 [ 1631.002069][T28530] device_add_class_symlinks+0x1cf/0x240 [ 1631.007822][T28530] device_add+0x507/0xc20 [ 1631.012212][T28530] wiphy_register+0x1dad/0x2ae0 [ 1631.017109][T28530] ? cfg80211_event_work+0x40/0x40 [ 1631.022245][T28530] ? minstrel_ht_alloc+0x88a/0x990 [ 1631.027394][T28530] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1631.033495][T28530] ieee80211_register_hw+0x3464/0x4250 [ 1631.039009][T28530] ? ieee80211_tasklet_handler+0x20/0x20 [ 1631.044662][T28530] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1631.050587][T28530] ? __debug_object_init+0xec/0x450 [ 1631.055820][T28530] ? __asan_memset+0x22/0x40 [ 1631.060447][T28530] ? __hrtimer_init+0x186/0x270 [ 1631.065327][T28530] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1631.071201][T28530] ? mac80211_hwsim_free+0x220/0x220 [ 1631.076515][T28530] ? rcu_is_watching+0x15/0xb0 [ 1631.081309][T28530] ? kstrndup+0xbd/0x140 [ 1631.085594][T28530] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1631.090734][T28530] ? __nla_validate+0x50/0x50 [ 1631.095445][T28530] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1631.101812][T28530] ? __nla_parse+0x40/0x50 [ 1631.106256][T28530] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1631.112625][T28530] genl_family_rcv_msg_doit+0x211/0x310 [ 1631.118195][T28530] ? end_current_label_crit_section+0x170/0x170 [ 1631.124473][T28530] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1631.130405][T28530] ? bpf_lsm_capable+0x9/0x10 [ 1631.135108][T28530] ? security_capable+0x89/0xb0 [ 1631.139991][T28530] genl_rcv_msg+0x619/0x7a0 [ 1631.144521][T28530] ? genl_bind+0x360/0x360 [ 1631.148986][T28530] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1631.155339][T28530] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1631.161965][T28530] netlink_rcv_skb+0x241/0x4d0 [ 1631.166762][T28530] ? genl_bind+0x360/0x360 [ 1631.171239][T28530] ? netlink_ack+0x1180/0x1180 [ 1631.176050][T28530] ? __lock_acquire+0x7d40/0x7d40 [ 1631.181116][T28530] ? down_read+0x1ac/0x2e0 [ 1631.185593][T28530] genl_rcv+0x28/0x40 [ 1631.189596][T28530] netlink_unicast+0x751/0x8d0 [ 1631.194409][T28530] netlink_sendmsg+0x8d0/0xbf0 [ 1631.199225][T28530] ? netlink_getsockopt+0x590/0x590 [ 1631.204470][T28530] ? aa_sock_msg_perm+0x94/0x150 [ 1631.209432][T28530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1631.214744][T28530] ? security_socket_sendmsg+0x80/0xa0 [ 1631.220222][T28530] ? netlink_getsockopt+0x590/0x590 [ 1631.225462][T28530] ____sys_sendmsg+0x5ba/0x960 [ 1631.230259][T28530] ? __asan_memset+0x22/0x40 [ 1631.234888][T28530] ? __sys_sendmsg_sock+0x30/0x30 [ 1631.239929][T28530] ? __import_iovec+0x5f2/0x850 [ 1631.244811][T28530] ? import_iovec+0x73/0xa0 [ 1631.249343][T28530] ___sys_sendmsg+0x2a6/0x360 [ 1631.254134][T28530] ? __sys_sendmsg+0x2a0/0x2a0 [ 1631.258976][T28530] __se_sys_sendmsg+0x1c2/0x2b0 [ 1631.263855][T28530] ? __x64_sys_sendmsg+0x80/0x80 [ 1631.268828][T28530] ? lock_chain_count+0x20/0x20 [ 1631.273709][T28530] ? lockdep_hardirqs_on+0x98/0x150 [ 1631.278933][T28530] do_syscall_64+0x55/0xa0 [ 1631.283408][T28530] ? clear_bhb_loop+0x40/0x90 [ 1631.288207][T28530] ? clear_bhb_loop+0x40/0x90 [ 1631.293002][T28530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1631.298918][T28530] RIP: 0033:0x7f64cd59cdd9 [ 1631.303353][T28530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.322998][T28530] RSP: 002b:00007f64ce38c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1631.331478][T28530] RAX: ffffffffffffffda RBX: 00007f64cd815fa0 RCX: 00007f64cd59cdd9 [ 1631.339586][T28530] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1631.347857][T28530] RBP: 00007f64cd632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1631.355863][T28530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.364051][T28530] R13: 00007f64cd816038 R14: 00007f64cd815fa0 R15: 00007ffdc7c33e18 [ 1631.372063][T28530] [ 1632.087318][T28587] netlink: 'syz.3.6874': attribute type 10 has an invalid length. [ 1632.104972][T28587] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6874'. [ 1632.552290][T28598] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6878'. [ 1632.562485][T28598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.590247][T28598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.600686][T28598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.612266][T28598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.339748][T28616] syzkaller0: left promiscuous mode [ 1633.357891][T28616] syzkaller0: left allmulticast mode [ 1633.909397][T28635] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6894'. [ 1634.221250][T28635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.235256][T28635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.248759][T28635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.569418][T28635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1635.034267][T28656] netlink: 'syz.0.6900': attribute type 10 has an invalid length. [ 1635.110770][T28658] netlink: 'syz.1.6902': attribute type 10 has an invalid length. [ 1635.157457][T28662] FAULT_INJECTION: forcing a failure. [ 1635.157457][T28662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1635.192794][T28662] CPU: 1 PID: 28662 Comm: syz.3.6903 Not tainted syzkaller #0 [ 1635.200362][T28662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1635.210485][T28662] Call Trace: [ 1635.213833][T28662] [ 1635.216917][T28662] dump_stack_lvl+0x18c/0x250 [ 1635.221742][T28662] ? show_regs_print_info+0x20/0x20 [ 1635.227158][T28662] ? load_image+0x420/0x420 [ 1635.231904][T28662] ? __lock_acquire+0x7d40/0x7d40 [ 1635.237059][T28662] should_fail_ex+0x39d/0x4d0 [ 1635.241969][T28662] prepare_alloc_pages+0x1e2/0x5f0 [ 1635.247191][T28662] __alloc_pages+0x134/0x460 [ 1635.251883][T28662] ? zone_statistics+0x170/0x170 [ 1635.257118][T28662] ? alloc_pages+0x4dc/0x740 [ 1635.262022][T28662] ? do_raw_spin_unlock+0x121/0x230 [ 1635.267452][T28662] __get_free_pages+0xc/0x30 [ 1635.272124][T28662] kasan_populate_vmalloc_pte+0x35/0x100 [ 1635.277992][T28662] __apply_to_page_range+0x860/0xdd0 [ 1635.283401][T28662] ? kasan_populate_vmalloc+0x70/0x70 [ 1635.288973][T28662] ? apply_to_page_range+0x50/0x50 [ 1635.294202][T28662] ? do_raw_spin_unlock+0x121/0x230 [ 1635.299517][T28662] alloc_vmap_area+0x1d0c/0x1e30 [ 1635.304739][T28662] ? vm_map_ram+0xcb0/0xcb0 [ 1635.309342][T28662] ? rcu_is_watching+0x15/0xb0 [ 1635.314221][T28662] __get_vm_area_node+0x162/0x370 [ 1635.319352][T28662] __vmalloc_node_range+0x36e/0x1330 [ 1635.324716][T28662] ? sock_map_alloc+0x1af/0x2c0 [ 1635.329841][T28662] ? free_vm_area+0x50/0x50 [ 1635.334520][T28662] ? bpf_map_area_alloc+0x5e/0x110 [ 1635.339712][T28662] ? rcu_is_watching+0x15/0xb0 [ 1635.344560][T28662] ? bpf_map_area_alloc+0x5e/0x110 [ 1635.349769][T28662] bpf_map_area_alloc+0xf1/0x110 [ 1635.354789][T28662] ? sock_map_alloc+0x1af/0x2c0 [ 1635.359719][T28662] sock_map_alloc+0x1af/0x2c0 [ 1635.364485][T28662] map_create+0x877/0x12f0 [ 1635.368991][T28662] ? bpf_lsm_bpf+0x9/0x10 [ 1635.373415][T28662] __sys_bpf+0x651/0x890 [ 1635.377758][T28662] ? bpf_link_show_fdinfo+0x390/0x390 [ 1635.383351][T28662] ? lock_chain_count+0x20/0x20 [ 1635.388316][T28662] __x64_sys_bpf+0x7c/0x90 [ 1635.392817][T28662] do_syscall_64+0x55/0xa0 [ 1635.397318][T28662] ? clear_bhb_loop+0x40/0x90 [ 1635.402102][T28662] ? clear_bhb_loop+0x40/0x90 [ 1635.406870][T28662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1635.412851][T28662] RIP: 0033:0x7f5078d9cdd9 [ 1635.417342][T28662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.437108][T28662] RSP: 002b:00007f5079c2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1635.445699][T28662] RAX: ffffffffffffffda RBX: 00007f5079015fa0 RCX: 00007f5078d9cdd9 [ 1635.453756][T28662] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0600000000000000 [ 1635.461802][T28662] RBP: 00007f5079c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1635.469849][T28662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.477892][T28662] R13: 00007f5079016038 R14: 00007f5079015fa0 R15: 00007ffefd996598 [ 1635.485956][T28662] [ 1635.498489][T28658] veth0_macvtap: left promiscuous mode [ 1635.656750][T28660] netlink: 'syz.4.6901': attribute type 10 has an invalid length. [ 1636.220074][T28682] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.6917'. [ 1636.909527][T28696] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1636.927122][T28696] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1636.942027][T28696] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1636.980477][T28695] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1636.990736][T28695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1637.004001][T28695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.018172][T28695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1637.029066][T28695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.049395][T28698] netlink: 539 bytes leftover after parsing attributes in process `syz.3.6913'. [ 1637.634564][T28711] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1637.664097][T28711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1637.684121][T28711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.713703][T28711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1637.737593][T28718] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.6919'. [ 1637.765299][T28711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.828574][T28720] netlink: 'syz.1.6921': attribute type 25 has an invalid length. [ 1637.837488][T28720] netlink: 'syz.1.6921': attribute type 29 has an invalid length. [ 1637.852199][T28720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1637.862223][T28720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1637.873009][T28720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1637.917350][T28712] netlink: 'syz.3.6918': attribute type 10 has an invalid length. [ 1638.635460][T28737] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1638.727212][T28745] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1639.056132][T28750] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1639.070825][T28754] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6931'. [ 1639.088675][T28754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1639.099856][T28754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.109875][T28754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1639.120902][T28754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.047428][T28769] netlink: 'syz.1.6933': attribute type 10 has an invalid length. [ 1640.155872][T28769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.564435][T28769] bridge_slave_1: left allmulticast mode [ 1640.580483][T28769] bridge_slave_1: left promiscuous mode [ 1640.614062][T28769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.647453][T28769] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1640.845498][T28780] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6939'. [ 1641.125333][T28787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.139912][T28787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.150521][T28787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.168423][T28787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.197843][T28793] FAULT_INJECTION: forcing a failure. [ 1641.197843][T28793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.214282][T28793] CPU: 1 PID: 28793 Comm: syz.3.6943 Not tainted syzkaller #0 [ 1641.222001][T28793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1641.232176][T28793] Call Trace: [ 1641.235474][T28793] [ 1641.238426][T28793] dump_stack_lvl+0x18c/0x250 [ 1641.243305][T28793] ? show_regs_print_info+0x20/0x20 [ 1641.248533][T28793] ? load_image+0x420/0x420 [ 1641.253097][T28793] ? __might_fault+0xaa/0x120 [ 1641.257871][T28793] should_fail_ex+0x39d/0x4d0 [ 1641.262580][T28793] copyin+0x1a/0x90 [ 1641.266420][T28793] _copy_from_iter+0x404/0x12e0 [ 1641.271281][T28793] ? __virt_addr_valid+0x18c/0x540 [ 1641.276480][T28793] ? __lock_acquire+0x7d40/0x7d40 [ 1641.282019][T28793] ? copyout_mc+0x70/0x70 [ 1641.286381][T28793] ? __virt_addr_valid+0x18c/0x540 [ 1641.291541][T28793] ? __virt_addr_valid+0x18c/0x540 [ 1641.296775][T28793] ? __virt_addr_valid+0x469/0x540 [ 1641.301927][T28793] ? __check_object_size+0x506/0xa20 [ 1641.307249][T28793] netlink_sendmsg+0x76b/0xbf0 [ 1641.312058][T28793] ? netlink_getsockopt+0x590/0x590 [ 1641.317317][T28793] ? aa_sock_msg_perm+0x94/0x150 [ 1641.322283][T28793] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1641.327596][T28793] ? security_socket_sendmsg+0x80/0xa0 [ 1641.333071][T28793] ? netlink_getsockopt+0x590/0x590 [ 1641.338467][T28793] ____sys_sendmsg+0x5ba/0x960 [ 1641.343297][T28793] ? __asan_memset+0x22/0x40 [ 1641.348179][T28793] ? __sys_sendmsg_sock+0x30/0x30 [ 1641.353258][T28793] ? __import_iovec+0x3fa/0x850 [ 1641.358130][T28793] ? import_iovec+0x73/0xa0 [ 1641.362651][T28793] ___sys_sendmsg+0x2a6/0x360 [ 1641.367342][T28793] ? get_pid_task+0x20/0x1e0 [ 1641.372040][T28793] ? __sys_sendmsg+0x2a0/0x2a0 [ 1641.376841][T28793] ? __lock_acquire+0x7d40/0x7d40 [ 1641.382682][T28793] __se_sys_sendmsg+0x1c2/0x2b0 [ 1641.387637][T28793] ? __x64_sys_sendmsg+0x80/0x80 [ 1641.392604][T28793] ? lockdep_hardirqs_on+0x98/0x150 [ 1641.397827][T28793] do_syscall_64+0x55/0xa0 [ 1641.402261][T28793] ? clear_bhb_loop+0x40/0x90 [ 1641.406961][T28793] ? clear_bhb_loop+0x40/0x90 [ 1641.411661][T28793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1641.417570][T28793] RIP: 0033:0x7f5078d9cdd9 [ 1641.422129][T28793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.441883][T28793] RSP: 002b:00007f5079c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.450683][T28793] RAX: ffffffffffffffda RBX: 00007f5079016090 RCX: 00007f5078d9cdd9 [ 1641.458769][T28793] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 1641.466863][T28793] RBP: 00007f5079c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.474851][T28793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.482840][T28793] R13: 00007f5079016128 R14: 00007f5079016090 R15: 00007ffefd996598 [ 1641.490927][T28793] [ 1641.677067][T28800] netlink: 'syz.1.6947': attribute type 29 has an invalid length. [ 1641.688493][T28800] netlink: 'syz.1.6947': attribute type 29 has an invalid length. [ 1641.865640][T28804] netlink: 'syz.1.6947': attribute type 29 has an invalid length. [ 1642.719988][T28816] __nla_validate_parse: 3 callbacks suppressed [ 1642.720123][T28816] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6951'. [ 1642.850164][T28816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.894001][T28816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.924990][T28816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.940809][T28816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.217607][T28826] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6954'. [ 1643.461907][T28838] FAULT_INJECTION: forcing a failure. [ 1643.461907][T28838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.481979][T28838] CPU: 0 PID: 28838 Comm: syz.0.6959 Not tainted syzkaller #0 [ 1643.489502][T28838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1643.499588][T28838] Call Trace: [ 1643.502897][T28838] [ 1643.505869][T28838] dump_stack_lvl+0x18c/0x250 [ 1643.510601][T28838] ? show_regs_print_info+0x20/0x20 [ 1643.515926][T28838] ? load_image+0x420/0x420 [ 1643.520462][T28838] ? __might_fault+0xaa/0x120 [ 1643.525173][T28838] ? __lock_acquire+0x7d40/0x7d40 [ 1643.530237][T28838] should_fail_ex+0x39d/0x4d0 [ 1643.534957][T28838] _copy_from_user+0x2f/0xe0 [ 1643.539603][T28838] csum_and_copy_from_iter+0x1f3/0x14a0 [ 1643.545305][T28838] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1643.550978][T28838] ? __kasan_slab_alloc+0x6c/0x80 [ 1643.556054][T28838] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1643.561399][T28838] ? rcu_is_watching+0x15/0xb0 [ 1643.566220][T28838] ip_generic_getfrag+0x163/0x2f0 [ 1643.571288][T28838] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1643.576186][T28838] ? skb_put+0x11b/0x210 [ 1643.580485][T28838] __ip_append_data+0x2f11/0x3d40 [ 1643.585596][T28838] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1643.590585][T28838] ? ip_setup_cork+0x860/0x860 [ 1643.595394][T28838] ? ip_setup_cork+0x530/0x860 [ 1643.600273][T28838] ip_make_skb+0x22b/0x440 [ 1643.604741][T28838] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1643.609646][T28838] ? ip_flush_pending_frames+0x250/0x250 [ 1643.615347][T28838] udp_sendmsg+0x1ade/0x23b0 [ 1643.620002][T28838] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1643.624892][T28838] ? udp_cmsg_send+0x350/0x350 [ 1643.629710][T28838] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1643.635833][T28838] ? lock_chain_count+0x20/0x20 [ 1643.640735][T28838] ? inet_sendmsg+0x14b/0x2f0 [ 1643.645473][T28838] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1643.651015][T28838] ? _local_bh_enable+0xa0/0xa0 [ 1643.656007][T28838] ? inet_sendmsg+0x14b/0x2f0 [ 1643.660692][T28838] ? inet_sendmsg+0x14b/0x2f0 [ 1643.665371][T28838] ? inet_send_prepare+0x260/0x260 [ 1643.670489][T28838] ____sys_sendmsg+0x5ba/0x960 [ 1643.675259][T28838] ? __lock_acquire+0x7d40/0x7d40 [ 1643.680300][T28838] ? __sys_sendmsg_sock+0x30/0x30 [ 1643.685344][T28838] ? __import_iovec+0x5f2/0x850 [ 1643.690249][T28838] ? import_iovec+0x73/0xa0 [ 1643.694806][T28838] ___sys_sendmsg+0x2a6/0x360 [ 1643.699542][T28838] ? __sys_sendmsg+0x2a0/0x2a0 [ 1643.704371][T28838] ? trace_call_bpf+0xc3/0x6c0 [ 1643.709227][T28838] __se_sys_sendmsg+0x1c2/0x2b0 [ 1643.714128][T28838] ? __x64_sys_sendmsg+0x80/0x80 [ 1643.719135][T28838] ? lockdep_hardirqs_on+0x98/0x150 [ 1643.724398][T28838] do_syscall_64+0x55/0xa0 [ 1643.728853][T28838] ? clear_bhb_loop+0x40/0x90 [ 1643.733574][T28838] ? clear_bhb_loop+0x40/0x90 [ 1643.738296][T28838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1643.744218][T28838] RIP: 0033:0x7f0aa2f9cdd9 [ 1643.748650][T28838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.768288][T28838] RSP: 002b:00007f0aa11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.776722][T28838] RAX: ffffffffffffffda RBX: 00007f0aa3215fa0 RCX: 00007f0aa2f9cdd9 [ 1643.784711][T28838] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1643.792701][T28838] RBP: 00007f0aa11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.800687][T28838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.808677][T28838] R13: 00007f0aa3216038 R14: 00007f0aa3215fa0 R15: 00007ffc4b688678 [ 1643.816674][T28838] [ 1643.872531][T28833] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.6957'. [ 1643.882883][T28833] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.6957'. [ 1643.905740][T28833] tipc: Started in network mode [ 1643.910830][T28833] tipc: Node identity d, cluster identity 56 [ 1643.963633][T28833] tipc: Node number set to 13 [ 1644.939740][T28859] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6965'. [ 1645.192056][T28867] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6967'. [ 1645.215170][T28867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.260820][T28867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.436705][T28867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.458470][T28867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1646.532552][T28889] hsr0: entered promiscuous mode [ 1646.756496][T28889] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.6974'. [ 1646.782210][T28889] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.6974'. [ 1646.818664][T28889] tipc: Started in network mode [ 1646.833911][T28889] tipc: Node identity d, cluster identity 56 [ 1646.839984][T28889] tipc: Node number set to 13 [ 1647.487125][T28908] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6987'. [ 1647.537530][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1647.586283][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.631456][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1647.657111][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.930389][T28921] FAULT_INJECTION: forcing a failure. [ 1647.930389][T28921] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.967209][T28921] CPU: 0 PID: 28921 Comm: syz.1.6986 Not tainted syzkaller #0 [ 1647.974938][T28921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1647.985129][T28921] Call Trace: [ 1647.988545][T28921] [ 1647.991515][T28921] dump_stack_lvl+0x18c/0x250 [ 1647.996252][T28921] ? show_regs_print_info+0x20/0x20 [ 1648.001517][T28921] ? load_image+0x420/0x420 [ 1648.006084][T28921] ? verify_lock_unused+0x140/0x140 [ 1648.011424][T28921] should_fail_ex+0x39d/0x4d0 [ 1648.016172][T28921] should_failslab+0x9/0x20 [ 1648.020728][T28921] slab_pre_alloc_hook+0x59/0x310 [ 1648.025787][T28921] kmem_cache_alloc+0x5a/0x2d0 [ 1648.030612][T28921] ? skb_clone+0x1eb/0x370 [ 1648.035228][T28921] skb_clone+0x1eb/0x370 [ 1648.039497][T28921] __netlink_deliver_tap+0x41c/0x830 [ 1648.044817][T28921] ? netlink_deliver_tap+0x2e/0x1b0 [ 1648.050038][T28921] netlink_deliver_tap+0x19c/0x1b0 [ 1648.055209][T28921] netlink_unicast+0x72c/0x8d0 [ 1648.060000][T28921] netlink_sendmsg+0x8d0/0xbf0 [ 1648.064879][T28921] ? netlink_getsockopt+0x590/0x590 [ 1648.070188][T28921] ? aa_sock_msg_perm+0x94/0x150 [ 1648.075145][T28921] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1648.080451][T28921] ? security_socket_sendmsg+0x80/0xa0 [ 1648.085942][T28921] ? netlink_getsockopt+0x590/0x590 [ 1648.091290][T28921] ____sys_sendmsg+0x5ba/0x960 [ 1648.096094][T28921] ? __asan_memset+0x22/0x40 [ 1648.100707][T28921] ? __sys_sendmsg_sock+0x30/0x30 [ 1648.105768][T28921] ? __import_iovec+0x5f2/0x850 [ 1648.110746][T28921] ? import_iovec+0x73/0xa0 [ 1648.115312][T28921] ___sys_sendmsg+0x2a6/0x360 [ 1648.120022][T28921] ? get_pid_task+0x20/0x1e0 [ 1648.124785][T28921] ? __sys_sendmsg+0x2a0/0x2a0 [ 1648.129601][T28921] ? __lock_acquire+0x7d40/0x7d40 [ 1648.134670][T28921] __se_sys_sendmsg+0x1c2/0x2b0 [ 1648.139545][T28921] ? __x64_sys_sendmsg+0x80/0x80 [ 1648.144687][T28921] ? lockdep_hardirqs_on+0x98/0x150 [ 1648.149919][T28921] do_syscall_64+0x55/0xa0 [ 1648.154352][T28921] ? clear_bhb_loop+0x40/0x90 [ 1648.159044][T28921] ? clear_bhb_loop+0x40/0x90 [ 1648.163741][T28921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.169654][T28921] RIP: 0033:0x7f64cd59cdd9 [ 1648.174088][T28921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.193824][T28921] RSP: 002b:00007f64ce38c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1648.202297][T28921] RAX: ffffffffffffffda RBX: 00007f64cd815fa0 RCX: 00007f64cd59cdd9 [ 1648.210323][T28921] RDX: 00000000200000c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 1648.218317][T28921] RBP: 00007f64ce38c090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.226337][T28921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.234338][T28921] R13: 00007f64cd816038 R14: 00007f64cd815fa0 R15: 00007ffdc7c33e18 [ 1648.242958][T28921] [ 1649.037240][T28928] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1649.052386][T28928] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1649.093417][T28928] tipc: Started in network mode [ 1649.114661][T28928] tipc: Node identity d, cluster identity 56 [ 1649.131335][T28928] tipc: Node number set to 13 [ 1649.179692][T28942] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6991'. [ 1649.217911][T28935] netlink: 'syz.4.6992': attribute type 10 has an invalid length. [ 1649.254991][T28935] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1649.695716][T28949] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1650.257753][T28955] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6997'. [ 1651.089593][T28980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7007'. [ 1651.153704][T28980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7007'. [ 1651.204127][T28983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7007'. [ 1658.423245][T29017] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1658.436918][T29017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1658.458628][T29017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.471367][T29017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1658.482025][T29017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1658.751601][T29025] netlink: 'syz.3.7017': attribute type 10 has an invalid length. [ 1659.015576][T29031] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.7018'. [ 1659.305761][T29035] FAULT_INJECTION: forcing a failure. [ 1659.305761][T29035] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.347793][T29035] CPU: 0 PID: 29035 Comm: syz.0.7021 Not tainted syzkaller #0 [ 1659.355430][T29035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1659.365698][T29035] Call Trace: [ 1659.369015][T29035] [ 1659.372002][T29035] dump_stack_lvl+0x18c/0x250 [ 1659.376748][T29035] ? show_regs_print_info+0x20/0x20 [ 1659.382002][T29035] ? load_image+0x420/0x420 [ 1659.386562][T29035] ? __might_sleep+0xe0/0xe0 [ 1659.391286][T29035] ? __lock_acquire+0x7d40/0x7d40 [ 1659.396364][T29035] should_fail_ex+0x39d/0x4d0 [ 1659.401102][T29035] should_failslab+0x9/0x20 [ 1659.405655][T29035] slab_pre_alloc_hook+0x59/0x310 [ 1659.410727][T29035] ? sk_prot_alloc+0xe7/0x210 [ 1659.415448][T29035] ? sk_prot_alloc+0xe7/0x210 [ 1659.420163][T29035] __kmem_cache_alloc_node+0x53/0x250 [ 1659.425592][T29035] ? sk_prot_alloc+0xe7/0x210 [ 1659.430313][T29035] __kmalloc+0xa4/0x230 [ 1659.434518][T29035] sk_prot_alloc+0xe7/0x210 [ 1659.439068][T29035] ? sk_alloc+0x24/0x360 [ 1659.443342][T29035] sk_alloc+0x3a/0x360 [ 1659.447453][T29035] ? bpf_ctx_init+0x163/0x1a0 [ 1659.452180][T29035] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 1659.457767][T29035] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 1659.463273][T29035] ? __fget_files+0x28/0x4b0 [ 1659.467895][T29035] ? __fget_files+0x28/0x4b0 [ 1659.472772][T29035] ? __fget_files+0x43d/0x4b0 [ 1659.477486][T29035] ? cpu_online+0x60/0x60 [ 1659.481837][T29035] bpf_prog_test_run+0x321/0x390 [ 1659.486798][T29035] __sys_bpf+0x49d/0x890 [ 1659.491059][T29035] ? bpf_link_show_fdinfo+0x390/0x390 [ 1659.496467][T29035] ? lock_chain_count+0x20/0x20 [ 1659.501345][T29035] __x64_sys_bpf+0x7c/0x90 [ 1659.505778][T29035] do_syscall_64+0x55/0xa0 [ 1659.510208][T29035] ? clear_bhb_loop+0x40/0x90 [ 1659.514903][T29035] ? clear_bhb_loop+0x40/0x90 [ 1659.519600][T29035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1659.525517][T29035] RIP: 0033:0x7f0aa2f9cdd9 [ 1659.529958][T29035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.549580][T29035] RSP: 002b:00007f0aa11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1659.558017][T29035] RAX: ffffffffffffffda RBX: 00007f0aa3215fa0 RCX: 00007f0aa2f9cdd9 [ 1659.566008][T29035] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1659.573997][T29035] RBP: 00007f0aa11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.582029][T29035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.590027][T29035] R13: 00007f0aa3216038 R14: 00007f0aa3215fa0 R15: 00007ffc4b688678 [ 1659.598034][T29035] [ 1660.147916][T29045] netlink: 'syz.1.7022': attribute type 10 has an invalid length. [ 1660.374558][T29045] hsr_slave_1: left promiscuous mode [ 1660.420879][T29045] team0: Port device hsr0 removed [ 1660.605537][T29049] netlink: 'syz.3.7024': attribute type 3 has an invalid length. [ 1660.613361][T29049] netlink: 'syz.3.7024': attribute type 16 has an invalid length. [ 1660.633267][T29049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1660.739111][T29054] netlink: 'syz.0.7025': attribute type 10 has an invalid length. [ 1660.748801][T29049] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1662.352923][T29079] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7030'. [ 1662.383043][T29076] netlink: 'syz.1.7031': attribute type 10 has an invalid length. [ 1662.409466][T29076] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1663.070661][T29094] netlink: 'syz.1.7035': attribute type 33 has an invalid length. [ 1663.084732][T29094] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7035'. [ 1663.398049][T29100] sctp: [Deprecated]: syz.0.7036 (pid 29100) Use of int in maxseg socket option. [ 1663.398049][T29100] Use struct sctp_assoc_value instead [ 1663.907736][T29104] netlink: 'syz.1.7037': attribute type 39 has an invalid length. [ 1664.925431][T29120] netlink: 'syz.1.7042': attribute type 1 has an invalid length. [ 1664.942314][T29120] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7042'. [ 1665.387658][T29131] netlink: 'syz.4.7047': attribute type 3 has an invalid length. [ 1665.397342][T29131] netlink: 'syz.4.7047': attribute type 1 has an invalid length. [ 1665.442717][T29131] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7047'. [ 1665.499955][T29128] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7046'. [ 1665.670349][T29134] netlink: 'syz.4.7048': attribute type 39 has an invalid length. [ 1665.756558][T29126] netlink: 'syz.3.7045': attribute type 10 has an invalid length. [ 1665.839681][T29138] netlink: 'syz.0.7049': attribute type 21 has an invalid length. [ 1667.500004][T29161] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.7055'. [ 1667.749934][T29163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7057'. [ 1667.798404][T29165] netlink: 'syz.0.7056': attribute type 3 has an invalid length. [ 1667.823757][T29165] netlink: 'syz.0.7056': attribute type 1 has an invalid length. [ 1667.842856][T29165] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7056'. [ 1668.106258][T29175] netlink: 'syz.1.7059': attribute type 39 has an invalid length. [ 1668.659548][T29193] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.7065'. [ 1668.909587][T29201] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7066'. [ 1668.943017][T29200] netlink: 'syz.1.7069': attribute type 3 has an invalid length. [ 1668.980209][T29200] netlink: 'syz.1.7069': attribute type 1 has an invalid length. [ 1669.014714][T29200] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7069'. [ 1669.151197][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.157925][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.714957][T29216] @ÿ: renamed from bond_slave_0 (while UP) [ 1670.268268][T29221] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.7076'. [ 1670.317991][T29222] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7084'. [ 1670.804131][T29243] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1671.316929][T29256] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 1671.953271][T29261] netlink: 'syz.4.7089': attribute type 3 has an invalid length. [ 1671.983973][T29261] netlink: 'syz.4.7089': attribute type 1 has an invalid length. [ 1671.991812][T29261] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1672.116501][T29266] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7090'. [ 1672.149462][T29269] netlink: 'syz.4.7092': attribute type 21 has an invalid length. [ 1672.174101][T29270] netlink: 'syz.0.7100': attribute type 3 has an invalid length. [ 1672.202566][T29270] netlink: 'syz.0.7100': attribute type 1 has an invalid length. [ 1672.262799][T29270] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1673.058215][T29280] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1673.534681][T29289] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7098'. [ 1673.564836][T29289] FAULT_INJECTION: forcing a failure. [ 1673.564836][T29289] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.578243][T29289] CPU: 0 PID: 29289 Comm: syz.3.7098 Not tainted syzkaller #0 [ 1673.585738][T29289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1673.595826][T29289] Call Trace: [ 1673.599137][T29289] [ 1673.602102][T29289] dump_stack_lvl+0x18c/0x250 [ 1673.606840][T29289] ? show_regs_print_info+0x20/0x20 [ 1673.612095][T29289] ? load_image+0x420/0x420 [ 1673.616662][T29289] ? rt6_nlmsg_size+0xd0/0x490 [ 1673.621479][T29289] ? __lock_acquire+0x7d40/0x7d40 [ 1673.626553][T29289] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1673.631971][T29289] should_fail_ex+0x39d/0x4d0 [ 1673.636704][T29289] should_failslab+0x9/0x20 [ 1673.641258][T29289] slab_pre_alloc_hook+0x59/0x310 [ 1673.646338][T29289] ? rt6_nlmsg_size+0x404/0x490 [ 1673.651328][T29289] ? nsim_fib_event_nb+0xe0b/0x1080 [ 1673.656666][T29289] kmem_cache_alloc_node+0x60/0x320 [ 1673.661917][T29289] ? __alloc_skb+0x103/0x2c0 [ 1673.666555][T29289] __alloc_skb+0x103/0x2c0 [ 1673.671029][T29289] inet6_rt_notify+0xb4/0x240 [ 1673.675753][T29289] ? atomic_notifier_call_chain+0x16e/0x180 [ 1673.681708][T29289] fib6_del+0x10d2/0x1580 [ 1673.686094][T29289] ? fib6_del+0x5f1/0x1580 [ 1673.690575][T29289] ? fib6_locate_1+0x6c0/0x6c0 [ 1673.695380][T29289] ? mark_lock+0x94/0x320 [ 1673.699757][T29289] ? verify_lock_unused+0x140/0x140 [ 1673.704989][T29289] ? __lock_acquire+0x1347/0x7d40 [ 1673.710043][T29289] fib6_clean_node+0x297/0x540 [ 1673.714852][T29289] ? node_free_rcu+0x30/0x30 [ 1673.719462][T29289] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1673.724854][T29289] fib6_walk_continue+0x672/0x900 [ 1673.729913][T29289] fib6_walk+0x149/0x290 [ 1673.734184][T29289] __fib6_clean_all+0x283/0x3e0 [ 1673.739065][T29289] ? __fib6_clean_all+0xb2/0x3e0 [ 1673.744029][T29289] ? rt6_sync_down_dev+0x160/0x160 [ 1673.749162][T29289] ? fib6_clean_all+0x30/0x30 [ 1673.753862][T29289] ? node_free_rcu+0x30/0x30 [ 1673.758475][T29289] ? rt6_sync_down_dev+0x160/0x160 [ 1673.763609][T29289] ? lockdep_hardirqs_on+0x98/0x150 [ 1673.768856][T29289] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1673.774797][T29289] ? _raw_spin_unlock+0x40/0x40 [ 1673.779683][T29289] rt6_disable_ip+0x12d/0x7b0 [ 1673.784394][T29289] ? __wake_up+0x132/0x1a0 [ 1673.788838][T29289] ? __wake_up_bit+0x210/0x210 [ 1673.793634][T29289] ? fib6_ifdown+0x4b0/0x4b0 [ 1673.798349][T29289] addrconf_ifdown+0x16c/0x18c0 [ 1673.803231][T29289] ? netlink_broadcast_filtered+0x10a4/0x1110 [ 1673.809331][T29289] ? addrconf_cleanup+0x1e0/0x1e0 [ 1673.814382][T29289] ? nlmsg_notify+0xf0/0x1a0 [ 1673.818991][T29289] ? nlmsg_notify+0x14a/0x1a0 [ 1673.823717][T29289] addrconf_notify+0x6c6/0x1010 [ 1673.828593][T29289] notifier_call_chain+0x197/0x380 [ 1673.833736][T29289] netdev_state_change+0xe4/0x170 [ 1673.838783][T29289] ? netdev_features_change+0xd0/0xd0 [ 1673.844185][T29289] do_setlink+0x84a/0x4130 [ 1673.848634][T29289] ? arch_stack_walk+0x160/0x190 [ 1673.853599][T29289] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1673.859771][T29289] ? stack_trace_save+0xaa/0x100 [ 1673.864745][T29289] ? __nla_validate_parse+0x2522/0x2ea0 [ 1673.870324][T29289] ? __nla_validate+0x50/0x50 [ 1673.875046][T29289] ? validate_linkmsg+0x719/0x910 [ 1673.880089][T29289] rtnl_newlink+0x17da/0x20a0 [ 1673.884796][T29289] ? rtnl_newlink+0x471/0x20a0 [ 1673.889594][T29289] ? rtnl_setlink+0x4e0/0x4e0 [ 1673.894289][T29289] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1673.900464][T29289] ? rcu_is_watching+0x15/0xb0 [ 1673.905246][T29289] ? trace_contention_end+0x39/0xe0 [ 1673.910470][T29289] ? __mutex_lock+0x315/0xcc0 [ 1673.915196][T29289] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1673.920332][T29289] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1673.925468][T29289] ? rtnl_setlink+0x4e0/0x4e0 [ 1673.930166][T29289] rtnetlink_rcv_msg+0x869/0xfa0 [ 1673.935225][T29289] ? rtnetlink_bind+0x80/0x80 [ 1673.940006][T29289] ? perf_trace_preemptirq_template+0x269/0x330 [ 1673.946380][T29289] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1673.952392][T29289] ? lock_chain_count+0x20/0x20 [ 1673.957386][T29289] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1673.962804][T29289] ? lockdep_hardirqs_on+0x98/0x150 [ 1673.968065][T29289] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1673.973562][T29289] ? _local_bh_enable+0xa0/0xa0 [ 1673.978440][T29289] ? __dev_queue_xmit+0x265/0x3660 [ 1673.983596][T29289] ? __dev_queue_xmit+0x265/0x3660 [ 1673.988758][T29289] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1673.994077][T29289] ? __dev_queue_xmit+0x265/0x3660 [ 1673.999228][T29289] ? ref_tracker_free+0x690/0x840 [ 1674.004294][T29289] netlink_rcv_skb+0x241/0x4d0 [ 1674.009096][T29289] ? rtnetlink_bind+0x80/0x80 [ 1674.013794][T29289] ? netlink_ack+0x1180/0x1180 [ 1674.018598][T29289] ? __lock_acquire+0x7d40/0x7d40 [ 1674.023649][T29289] ? netlink_deliver_tap+0x2e/0x1b0 [ 1674.028962][T29289] netlink_unicast+0x751/0x8d0 [ 1674.033764][T29289] netlink_sendmsg+0x8d0/0xbf0 [ 1674.038559][T29289] ? netlink_getsockopt+0x590/0x590 [ 1674.043780][T29289] ? aa_sock_msg_perm+0x94/0x150 [ 1674.048735][T29289] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1674.054066][T29289] ? security_socket_sendmsg+0x80/0xa0 [ 1674.059541][T29289] ? netlink_getsockopt+0x590/0x590 [ 1674.064854][T29289] ____sys_sendmsg+0x5ba/0x960 [ 1674.069641][T29289] ? __asan_memset+0x22/0x40 [ 1674.074268][T29289] ? __sys_sendmsg_sock+0x30/0x30 [ 1674.079313][T29289] ? __import_iovec+0x5f2/0x850 [ 1674.084186][T29289] ? import_iovec+0x73/0xa0 [ 1674.088803][T29289] ___sys_sendmsg+0x2a6/0x360 [ 1674.093508][T29289] ? __sys_sendmsg+0x2a0/0x2a0 [ 1674.098411][T29289] ? trace_call_bpf+0xc3/0x6c0 [ 1674.103393][T29289] __se_sys_sendmsg+0x1c2/0x2b0 [ 1674.108266][T29289] ? __x64_sys_sendmsg+0x80/0x80 [ 1674.113237][T29289] ? lockdep_hardirqs_on+0x98/0x150 [ 1674.118457][T29289] do_syscall_64+0x55/0xa0 [ 1674.122896][T29289] ? clear_bhb_loop+0x40/0x90 [ 1674.127613][T29289] ? clear_bhb_loop+0x40/0x90 [ 1674.132332][T29289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1674.138383][T29289] RIP: 0033:0x7f5078d9cdd9 [ 1674.142840][T29289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.162477][T29289] RSP: 002b:00007f5079c2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1674.170915][T29289] RAX: ffffffffffffffda RBX: 00007f5079015fa0 RCX: 00007f5078d9cdd9 [ 1674.178909][T29289] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1674.186925][T29289] RBP: 00007f5079c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.194955][T29289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.202950][T29289] R13: 00007f5079016038 R14: 00007f5079015fa0 R15: 00007ffefd996598 [ 1674.211213][T29289] [ 1674.266686][T29289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1674.353615][T29287] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7097'. [ 1674.403243][T29287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.434150][T29287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.483866][T29287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.498202][T29287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.612932][T29297] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 1674.767689][T29302] netlink: 'syz.4.7103': attribute type 3 has an invalid length. [ 1674.793735][T29302] netlink: 'syz.4.7103': attribute type 1 has an invalid length. [ 1674.801660][T29302] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7103'. [ 1675.151783][T29309] sctp: [Deprecated]: syz.3.7106 (pid 29309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1675.151783][T29309] Use struct sctp_sack_info instead [ 1675.271788][T29319] netlink: 'syz.3.7109': attribute type 21 has an invalid length. [ 1675.429969][T29321] __nla_validate_parse: 2 callbacks suppressed [ 1675.429991][T29321] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1675.446243][T29321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1675.467591][T29321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.477919][T29321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1675.491615][T29321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.529943][T29323] Ÿë: port 1(ip6gretap0) entered blocking state [ 1675.536724][T29323] Ÿë: port 1(ip6gretap0) entered disabled state [ 1675.548425][T29323] ip6gretap0: entered allmulticast mode [ 1675.555274][T29323] ip6gretap0: entered promiscuous mode [ 1676.202332][T29338] netlink: 'syz.0.7115': attribute type 3 has an invalid length. [ 1676.210346][T29338] netlink: 'syz.0.7115': attribute type 1 has an invalid length. [ 1676.220524][T29338] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7115'. [ 1676.634725][T29342] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 1677.090464][T29351] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7121'. [ 1677.284967][T29349] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7120'. [ 1677.311361][T29349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.323945][T29349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.336693][T29349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.347464][T29349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.569719][T29364] netlink: 'syz.0.7125': attribute type 3 has an invalid length. [ 1677.583941][T29364] netlink: 'syz.0.7125': attribute type 1 has an invalid length. [ 1677.591762][T29364] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7125'. [ 1678.864733][T27923] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1678.875587][T27923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1678.884090][T27923] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1678.893058][T27923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1678.902295][T27923] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1678.922080][T27923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1679.352244][T29383] chnl_net:caif_netlink_parms(): no params data found [ 1679.504417][T29383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.511954][T29383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.525599][T29383] bridge_slave_0: entered allmulticast mode [ 1679.533284][T29383] bridge_slave_0: entered promiscuous mode [ 1679.548198][T29383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.562372][T29383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.570350][T29383] bridge_slave_1: entered allmulticast mode [ 1679.586966][T29383] bridge_slave_1: entered promiscuous mode [ 1679.642743][T29383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.663255][T29383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1679.729109][T29383] team0: Port device team_slave_0 added [ 1679.744362][T29383] team0: Port device team_slave_1 added [ 1679.791050][T29383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.799383][T29383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.836824][T29383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.851874][T29383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.863302][T29383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.895812][T29383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.001081][T27923] Bluetooth: hci3: command tx timeout [ 1681.019511][T29383] hsr_slave_0: entered promiscuous mode [ 1681.140276][T29383] hsr_slave_1: entered promiscuous mode [ 1681.630543][T29398] sit0: left promiscuous mode [ 1681.643946][T29398] sit0: entered allmulticast mode [ 1681.651851][T29400] sit0: entered promiscuous mode [ 1682.282693][T29402] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7134'. [ 1682.445834][T15873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.567641][T29407] netlink: 'syz.0.7136': attribute type 3 has an invalid length. [ 1682.617110][T29407] netlink: 'syz.0.7136': attribute type 1 has an invalid length. [ 1682.643445][T29407] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1682.695613][T15873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.799949][T15873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.909382][T15873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.014645][T29416] netlink: 'syz.3.7141': attribute type 1 has an invalid length. [ 1683.063688][T27923] Bluetooth: hci3: command tx timeout [ 1683.315756][T29414] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.7140'. [ 1683.397834][T15873] tipc: Left network mode [ 1683.541383][T29424] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7143'. [ 1684.123926][T29430] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7144'. [ 1684.153747][T29430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.178954][T29430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.222136][T29430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.253400][T29430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.972221][T29444] netlink: 'syz.4.7146': attribute type 3 has an invalid length. [ 1685.012632][T29444] netlink: 'syz.4.7146': attribute type 1 has an invalid length. [ 1685.062265][T29444] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7146'. [ 1685.155942][T21503] Bluetooth: hci3: command tx timeout [ 1685.451714][T29448] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.7147'. [ 1685.737956][T27923] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1686.038404][T29383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1686.156234][T29383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1686.171305][T29383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1686.218739][T29383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1686.407077][T29468] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1686.712349][T29383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.897285][T29383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.926383][T29482] netlink: 'syz.4.7156': attribute type 3 has an invalid length. [ 1686.943827][T29482] netlink: 'syz.4.7156': attribute type 1 has an invalid length. [ 1687.019843][T29482] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1687.215249][T15872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.222665][T15872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.231502][T27923] Bluetooth: hci3: command tx timeout [ 1687.406218][T15872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.413525][T15872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.047457][T29496] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7157'. [ 1688.141205][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.156037][T15873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.164803][T15873] bridge_slave_0: left promiscuous mode [ 1688.170527][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.211604][T15873] veth1_macvtap: left promiscuous mode [ 1688.218355][T15873] veth1_vlan: left promiscuous mode [ 1688.223916][T15873] veth0_vlan: left promiscuous mode [ 1688.656543][T29509] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1693.314618][T15873] team0 (unregistering): Port device geneve1 removed [ 1693.757475][T15873] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1693.809693][T15873] team0 (unregistering): Port device team_slave_1 removed [ 1693.878503][T15873] team0 (unregistering): Port device team_slave_0 removed [ 1693.933214][T15873] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.991686][T15873] .` (unregistering): (slave 1@ÿ): Releasing backup interface [ 1694.047045][T15873] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1694.340088][T15873] team0 (unregistering): Port device dummy0 removed [ 1694.373116][T15873] .` (unregistering): (slave team0): Releasing backup interface [ 1694.418347][T15873] .` (unregistering): Released all slaves [ 1694.560367][T29383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1694.608551][T29383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1694.773059][T29514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7161'. [ 1694.901583][T29514] IPv6: Can't replace route, no match found [ 1695.120228][T29383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.172668][T29383] veth0_vlan: entered promiscuous mode [ 1695.190590][T29383] veth1_vlan: entered promiscuous mode [ 1695.231277][T29383] veth0_macvtap: entered promiscuous mode [ 1695.266926][T29383] veth1_macvtap: entered promiscuous mode [ 1695.298450][T29383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.314661][T29383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.330244][T29383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1695.343910][T29383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.398861][T29528] netlink: 'syz.4.7165': attribute type 3 has an invalid length. [ 1695.435491][T29528] netlink: 'syz.4.7165': attribute type 1 has an invalid length. [ 1695.443338][T29528] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7165'. [ 1695.446208][T29383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.483952][T29383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.494920][T29383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.506403][T29383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.563803][T29383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.576757][T29383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.602985][T29383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.612786][T29383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.622935][T29383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.634748][T29383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.899094][T15871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.928654][T15871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.034401][T15872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.053126][T15872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.172332][T29544] netlink: 'syz.1.7130': attribute type 6 has an invalid length. [ 1697.622755][T29560] netlink: 'syz.3.7176': attribute type 3 has an invalid length. [ 1697.661338][T29560] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 1697.704105][T29560] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7176'. [ 1699.305622][T21503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1699.315427][T21503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1699.324169][T21503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1699.336249][T21503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1699.345740][T21503] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1699.353407][T21503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1701.834632][T29590] Bluetooth: hci1: command tx timeout [ 1703.876989][T29590] Bluetooth: hci1: command tx timeout [ 1703.920085][T15872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.996259][T29592] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7184'. [ 1704.042154][T15872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.257757][T15872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.358710][T29605] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 1704.400193][T29605] netlink: 'syz.3.7186': attribute type 1 has an invalid length. [ 1704.437515][T29605] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7186'. [ 1704.617900][T15872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.123316][T29587] chnl_net:caif_netlink_parms(): no params data found [ 1705.517216][T29587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.535065][T29587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.559391][T29587] bridge_slave_0: entered allmulticast mode [ 1705.592109][T29587] bridge_slave_0: entered promiscuous mode [ 1705.627725][T29587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.650020][T29587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.678383][T29587] bridge_slave_1: entered allmulticast mode [ 1705.695142][T29587] bridge_slave_1: entered promiscuous mode [ 1705.825496][T29587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.838189][T29587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.944736][T29590] Bluetooth: hci1: command tx timeout [ 1706.006263][T29641] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1706.218895][T15872] ip6gretap0 (unregistering): left allmulticast mode [ 1706.230899][T15872] ip6gretap0 (unregistering): left promiscuous mode [ 1706.247280][T15872] bridge0: port 3(ip6gretap0) entered disabled state [ 1706.378256][T29587] team0: Port device team_slave_0 added [ 1706.448068][T29587] team0: Port device team_slave_1 added [ 1706.991672][T29661] netlink: 'syz.4.7196': attribute type 3 has an invalid length. [ 1707.011903][T29587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.021747][T29661] netlink: 'syz.4.7196': attribute type 1 has an invalid length. [ 1707.042169][T29661] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1707.049029][T29587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.129259][T29587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.146525][T29587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.153961][T29587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.180222][T29587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.445951][T29665] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7198'. [ 1707.479453][T29587] hsr_slave_0: entered promiscuous mode [ 1707.493331][T29587] hsr_slave_1: entered promiscuous mode [ 1707.502798][T29587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1707.511446][T29587] Cannot create hsr debugfs directory [ 1707.749135][T29674] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.7201'. [ 1708.023576][T29590] Bluetooth: hci1: command tx timeout [ 1709.913982][T29707] netlink: 'syz.1.7206': attribute type 3 has an invalid length. [ 1709.967900][T29708] netlink: 'syz.4.7207': attribute type 39 has an invalid length. [ 1710.003846][T29707] netlink: 'syz.1.7206': attribute type 1 has an invalid length. [ 1710.011881][T29707] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7206'. [ 1710.378717][T15872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.405097][T15872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.460340][T15872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.467887][T15872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.481585][T15872] bridge_slave_1: left allmulticast mode [ 1710.487660][T15872] bridge_slave_1: left promiscuous mode [ 1710.493743][T15872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.507339][T15872] bridge_slave_0: left promiscuous mode [ 1710.513330][T15872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.561250][T15872] veth1_macvtap: left promiscuous mode [ 1711.105178][T15872] .` (unregistering): (slave hsr_slave_0): Releasing backup interface [ 1711.370000][T15872] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.427708][T15872] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.787413][T15872] .` (unregistering): Released all slaves [ 1711.900646][T29721] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7209'. [ 1712.245453][T29587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1712.327338][T29587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1715.299725][T29735] netlink: 'syz.3.7216': attribute type 39 has an invalid length. [ 1715.343727][T29587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1715.356867][T29587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1715.772061][T29587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.944357][T29587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.054001][T23824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.061249][T23824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.127094][T23824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.134359][T23824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.965909][T29776] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7223'. [ 1717.074745][T29781] netlink: 'syz.4.7224': attribute type 3 has an invalid length. [ 1717.093047][T29781] netlink: 'syz.4.7224': attribute type 1 has an invalid length. [ 1717.113406][T29781] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7224'. [ 1717.196673][T29587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1717.325288][T29785] netlink: 'syz.1.7225': attribute type 39 has an invalid length. [ 1717.510302][T29587] veth0_vlan: entered promiscuous mode [ 1717.535843][T29587] veth1_vlan: entered promiscuous mode [ 1717.705490][T29587] veth0_macvtap: entered promiscuous mode [ 1717.738255][T29587] veth1_macvtap: entered promiscuous mode [ 1717.844117][T29587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.873956][T29587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.908006][T29587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.931075][T29587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.957386][T29587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.009484][T29587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.031689][T29587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.042295][T29587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.053186][T29587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.073166][T29587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.194591][T29587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.229992][T29587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.303580][T29587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.335524][T29587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.529364][T15870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.558663][T15870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.626668][T15872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.647880][T15872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.794674][T29824] netlink: 'syz.4.7233': attribute type 3 has an invalid length. [ 1718.823273][T29824] netlink: 'syz.4.7233': attribute type 1 has an invalid length. [ 1718.853343][T29824] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7233'. [ 1719.964444][T29845] netlink: 'syz.4.7236': attribute type 39 has an invalid length. [ 1720.017646][T29841] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7235'. [ 1720.622398][T29866] netlink: 'syz.3.7243': attribute type 3 has an invalid length. [ 1720.654126][T29866] netlink: 'syz.3.7243': attribute type 1 has an invalid length. [ 1720.661980][T29866] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7243'. [ 1720.873858][T29863] netlink: 'syz.0.7241': attribute type 25 has an invalid length. [ 1721.051800][T29873] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.7244'. [ 1722.015252][T29897] netlink: 'syz.1.7249': attribute type 39 has an invalid length. [ 1722.245887][T29906] netlink: 'syz.3.7252': attribute type 10 has an invalid length. [ 1722.254101][T29906] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.7252'. [ 1722.354925][T29907] netlink: 'syz.3.7252': attribute type 10 has an invalid length. [ 1722.411692][T29907] netlink: 'syz.3.7252': attribute type 9 has an invalid length. [ 1722.492115][T29907] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7252'. [ 1722.535453][T29911] netlink: 'syz.0.7254': attribute type 3 has an invalid length. [ 1722.553911][T29911] netlink: 'syz.0.7254': attribute type 1 has an invalid length. [ 1722.575414][T29911] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7254'. [ 1722.626471][T29912] netlink: 'syz.3.7252': attribute type 9 has an invalid length. [ 1722.654303][T29912] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7252'. [ 1728.235738][T29947] netlink: 'syz.1.7261': attribute type 39 has an invalid length. [ 1729.302428][T29964] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7266'. [ 1729.335734][T29969] netlink: 'syz.4.7270': attribute type 3 has an invalid length. [ 1729.335767][T29969] netlink: 'syz.4.7270': attribute type 16 has an invalid length. [ 1729.335787][T29969] netlink: 'syz.4.7270': attribute type 18 has an invalid length. [ 1729.335804][T29969] netlink: 'syz.4.7270': attribute type 20 has an invalid length. [ 1729.335831][T29969] netlink: 'syz.4.7270': attribute type 25 has an invalid length. [ 1729.406780][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.419593][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.430577][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.443366][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.514449][T29964] batadv_slave_1: entered promiscuous mode [ 1729.794389][T29975] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7271'. [ 1729.877376][T29975] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7271'. [ 1729.933370][T29976] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7271'. [ 1730.375796][T29998] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7275'. [ 1730.603394][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.609981][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.904765][T29993] netlink: 'syz.3.7277': attribute type 10 has an invalid length. [ 1730.912838][T29993] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1732.637423][T30023] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7284'. [ 1734.495897][T30063] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1736.366903][T30080] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7308'. [ 1736.424272][T30078] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7301'. [ 1736.442787][T30078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.464664][T30078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1736.525663][T30078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1736.583657][T30078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.532915][T30123] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7312'. [ 1748.377949][T30144] FAULT_INJECTION: forcing a failure. [ 1748.377949][T30144] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.393681][T30144] CPU: 0 PID: 30144 Comm: syz.0.7318 Not tainted syzkaller #0 [ 1748.401217][T30144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1748.411304][T30144] Call Trace: [ 1748.414607][T30144] [ 1748.417625][T30144] dump_stack_lvl+0x18c/0x250 [ 1748.422342][T30144] ? show_regs_print_info+0x20/0x20 [ 1748.427567][T30144] ? load_image+0x420/0x420 [ 1748.432095][T30144] ? perf_trace_lock_acquire+0x104/0x410 [ 1748.437754][T30144] ? verify_lock_unused+0x140/0x140 [ 1748.442974][T30144] ? perf_trace_lock_acquire+0x104/0x410 [ 1748.448637][T30144] should_fail_ex+0x39d/0x4d0 [ 1748.453343][T30144] should_failslab+0x9/0x20 [ 1748.457868][T30144] slab_pre_alloc_hook+0x59/0x310 [ 1748.462925][T30144] kmem_cache_alloc+0x5a/0x2d0 [ 1748.467712][T30144] ? skb_clone+0x1eb/0x370 [ 1748.472160][T30144] skb_clone+0x1eb/0x370 [ 1748.476425][T30144] __netlink_deliver_tap+0x41c/0x830 [ 1748.481749][T30144] ? netlink_deliver_tap+0x2e/0x1b0 [ 1748.486977][T30144] netlink_deliver_tap+0x19c/0x1b0 [ 1748.492121][T30144] netlink_unicast+0x72c/0x8d0 [ 1748.496916][T30144] netlink_sendmsg+0x8d0/0xbf0 [ 1748.501721][T30144] ? netlink_getsockopt+0x590/0x590 [ 1748.506950][T30144] ? aa_sock_msg_perm+0x94/0x150 [ 1748.511916][T30144] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1748.517220][T30144] ? security_socket_sendmsg+0x80/0xa0 [ 1748.522695][T30144] ? netlink_getsockopt+0x590/0x590 [ 1748.527921][T30144] ____sys_sendmsg+0x5ba/0x960 [ 1748.532718][T30144] ? __asan_memset+0x22/0x40 [ 1748.537327][T30144] ? __sys_sendmsg_sock+0x30/0x30 [ 1748.542367][T30144] ? __import_iovec+0x5f2/0x850 [ 1748.547246][T30144] ? import_iovec+0x73/0xa0 [ 1748.551858][T30144] ___sys_sendmsg+0x2a6/0x360 [ 1748.556562][T30144] ? get_pid_task+0x20/0x1e0 [ 1748.561176][T30144] ? __sys_sendmsg+0x2a0/0x2a0 [ 1748.565976][T30144] ? __lock_acquire+0x7d40/0x7d40 [ 1748.571040][T30144] __se_sys_sendmsg+0x1c2/0x2b0 [ 1748.575910][T30144] ? __x64_sys_sendmsg+0x80/0x80 [ 1748.580876][T30144] ? lockdep_hardirqs_on+0x98/0x150 [ 1748.586101][T30144] do_syscall_64+0x55/0xa0 [ 1748.590538][T30144] ? clear_bhb_loop+0x40/0x90 [ 1748.595246][T30144] ? clear_bhb_loop+0x40/0x90 [ 1748.599946][T30144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1748.606126][T30144] RIP: 0033:0x7f66ecd9cdd9 [ 1748.610658][T30144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1748.630339][T30144] RSP: 002b:00007f66edc3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1748.638796][T30144] RAX: ffffffffffffffda RBX: 00007f66ed016090 RCX: 00007f66ecd9cdd9 [ 1748.646785][T30144] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1748.654778][T30144] RBP: 00007f66edc3d090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.662762][T30144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.670761][T30144] R13: 00007f66ed016128 R14: 00007f66ed016090 R15: 00007ffe8368a248 [ 1748.678768][T30144] [ 1748.696255][T30144] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1748.705801][T30144] netlink: get zone limit has 4 unknown bytes [ 1749.545552][T30156] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7322'. [ 1749.641117][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1749.695008][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1749.748746][T30156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1749.780401][T30156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.129165][T30166] netlink: 'syz.1.7325': attribute type 25 has an invalid length. [ 1755.455141][T30205] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1756.885987][T30217] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7334'. [ 1757.694920][T30230] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7339'. [ 1757.815357][T30230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.931606][T30230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.146449][T30230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.169358][T30230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.187380][T30230] batadv_slave_1: entered promiscuous mode [ 1758.653888][T30241] netlink: 'syz.3.7344': attribute type 22 has an invalid length. [ 1758.854637][T30241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7344'. [ 1759.380574][T30244] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7342'. [ 1759.428949][T30244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.474534][T30244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.500660][T30244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.512795][T30244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.445356][T30256] netlink: 'syz.0.7347': attribute type 25 has an invalid length. [ 1760.872349][T27923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1760.883326][T27923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1760.892195][T27923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1760.902672][T27923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1760.911435][T27923] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1760.927961][T27923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1761.268953][T29590] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1761.537974][T30283] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7355'. [ 1761.554436][T30283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.572330][T30283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.582525][T30283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.593238][T30283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.793010][T15873] bond0: (slave netdevsim0): Releasing backup interface [ 1763.033844][T29590] Bluetooth: hci4: command tx timeout [ 1763.220815][T30292] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7357'. [ 1763.254711][T30292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.277105][T30292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.303778][T30292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.317195][T30292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.328662][T30264] chnl_net:caif_netlink_parms(): no params data found [ 1763.348694][T30295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7358'. [ 1763.761465][T30264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.813883][T30264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.830869][T30264] bridge_slave_0: entered allmulticast mode [ 1763.863629][T30264] bridge_slave_0: entered promiscuous mode [ 1763.970654][T30264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.056649][T30264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.128014][T30264] bridge_slave_1: entered allmulticast mode [ 1764.396407][T30264] bridge_slave_1: entered promiscuous mode [ 1765.065057][T29590] Bluetooth: hci4: command tx timeout [ 1765.086995][T30264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.112053][T15873] tipc: Left network mode [ 1765.141255][T30264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.353960][T30264] team0: Port device team_slave_0 added [ 1766.369453][T30264] team0: Port device team_slave_1 added [ 1767.146323][T29590] Bluetooth: hci4: command tx timeout [ 1769.191703][T30264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.390710][T29590] Bluetooth: hci4: command tx timeout [ 1769.514989][T30264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.028846][T30264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.295010][T30264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.339282][T30264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.654279][T30264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.870651][T30264] hsr_slave_0: entered promiscuous mode [ 1770.923099][T30264] hsr_slave_1: entered promiscuous mode [ 1770.951104][T30264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1770.958890][T30264] Cannot create hsr debugfs directory [ 1771.832605][T30360] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7369'. [ 1772.566540][T30380] netlink: 'syz.3.7374': attribute type 3 has an invalid length. [ 1772.574847][T30380] netlink: 'syz.3.7374': attribute type 1 has an invalid length. [ 1772.582898][T30380] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7374'. [ 1773.118416][T30392] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.7378'. [ 1773.283284][T30392] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.7378'. [ 1773.309471][T30392] netlink: zone id is out of range [ 1773.320617][T15873] [ 1773.323005][T15873] ====================================================== [ 1773.330034][T15873] WARNING: possible circular locking dependency detected [ 1773.333568][T30392] netlink: zone id is out of range [ 1773.337040][T15873] syzkaller #0 Not tainted [ 1773.342158][T30392] netlink: zone id is out of range [ 1773.346561][T15873] ------------------------------------------------------ [ 1773.346570][T15873] kworker/u4:50/15873 is trying to acquire lock: [ 1773.346582][T15873] ffff88802695cd00 (team->team_lock_key#6){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1773.346637][T15873] [ 1773.346637][T15873] but task is already holding lock: [ 1773.346644][T15873] ffff88806c2e0768 [ 1773.351807][T30392] netlink: zone id is out of range [ 1773.358763][T15873] (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1773.358814][T15873] [ 1773.358814][T15873] which lock already depends on the new lock. [ 1773.358814][T15873] [ 1773.358821][T15873] [ 1773.358821][T15873] the existing dependency chain (in reverse order) is: [ 1773.358828][T15873] [ 1773.358828][T15873] -> #1 ( [ 1773.366158][T30392] netlink: zone id is out of range [ 1773.374689][T15873] &rdev->wiphy.mtx){+.+.}-{3:3}: [ 1773.374714][T15873] __mutex_lock+0x136/0xcc0 [ 1773.374738][T15873] ieee80211_open+0x144/0x200 [ 1773.374756][T15873] __dev_open+0x2cb/0x430 [ 1773.382196][T30392] netlink: zone id is out of range [ 1773.385935][T15873] dev_open+0xab/0x190 [ 1773.385955][T15873] team_add_slave+0x75f/0x29a0 [ 1773.391250][T30392] netlink: zone id is out of range [ 1773.400258][T15873] do_setlink+0xdfe/0x4130 [ 1773.400277][T15873] rtnl_newlink+0x17da/0x20a0 [ 1773.400294][T15873] rtnetlink_rcv_msg+0x869/0xfa0 [ 1773.400311][T15873] netlink_rcv_skb+0x241/0x4d0 [ 1773.400334][T15873] netlink_unicast+0x751/0x8d0 [ 1773.400355][T15873] netlink_sendmsg+0x8d0/0xbf0 [ 1773.413088][T30392] netlink: zone id is out of range [ 1773.419778][T15873] ____sys_sendmsg+0x5ba/0x960 [ 1773.419800][T15873] ___sys_sendmsg+0x2a6/0x360 [ 1773.419816][T15873] __se_sys_sendmsg+0x1c2/0x2b0 [ 1773.419833][T15873] do_syscall_64+0x55/0xa0 [ 1773.419848][T15873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1773.419870][T15873] [ 1773.419870][T15873] -> #0 (team->team_lock_key#6){+.+.}-{3:3}: [ 1773.419909][T15873] __lock_acquire+0x2df1/0x7d40 [ 1773.419930][T15873] lock_acquire+0x19e/0x420 [ 1773.419948][T15873] __mutex_lock+0x136/0xcc0 [ 1773.426830][T30392] netlink: zone id is out of range [ 1773.430342][T15873] team_del_slave+0x32/0x1c0 [ 1773.435590][T30392] netlink: zone id is out of range [ 1773.440301][T15873] team_device_event+0x28d/0xa20 [ 1773.440323][T15873] notifier_call_chain+0x197/0x380 [ 1773.585108][T15873] unregister_netdevice_many_notify+0x100d/0x1900 [ 1773.592090][T15873] unregister_netdevice_queue+0x32c/0x370 [ 1773.598356][T15873] _cfg80211_unregister_wdev+0x16b/0x580 [ 1773.604530][T15873] ieee80211_remove_interfaces+0x49e/0x690 [ 1773.610892][T15873] ieee80211_unregister_hw+0x5d/0x2a0 [ 1773.616803][T15873] mac80211_hwsim_del_radio+0x289/0x480 [ 1773.622876][T15873] hwsim_exit_net+0x58d/0x650 [ 1773.628087][T15873] cleanup_net+0x70a/0xbb0 [ 1773.633054][T15873] process_scheduled_works+0xa5d/0x15d0 [ 1773.639172][T15873] worker_thread+0xa55/0xfc0 [ 1773.644313][T15873] kthread+0x2fa/0x390 [ 1773.649013][T15873] ret_from_fork+0x48/0x80 [ 1773.654068][T15873] ret_from_fork_asm+0x11/0x20 [ 1773.659417][T15873] [ 1773.659417][T15873] other info that might help us debug this: [ 1773.659417][T15873] [ 1773.669791][T15873] Possible unsafe locking scenario: [ 1773.669791][T15873] [ 1773.677350][T15873] CPU0 CPU1 [ 1773.682743][T15873] ---- ---- [ 1773.688159][T15873] lock(&rdev->wiphy.mtx); [ 1773.692683][T15873] lock(team->team_lock_key#6); [ 1773.700180][T15873] lock(&rdev->wiphy.mtx); [ 1773.707217][T15873] lock(team->team_lock_key#6); [ 1773.712175][T15873] [ 1773.712175][T15873] *** DEADLOCK *** [ 1773.712175][T15873] [ 1773.720338][T15873] 5 locks held by kworker/u4:50/15873: [ 1773.725825][T15873] #0: ffff888140044938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1773.736849][T15873] #1: ffffc9000bb27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1773.747399][T15873] #2: ffffffff8e3b5a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1773.756990][T15873] #3: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1773.766978][T15873] #4: ffff88806c2e0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1773.777955][T15873] [ 1773.777955][T15873] stack backtrace: [ 1773.783849][T15873] CPU: 1 PID: 15873 Comm: kworker/u4:50 Not tainted syzkaller #0 [ 1773.791602][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1773.801675][T15873] Workqueue: netns cleanup_net [ 1773.806470][T15873] Call Trace: [ 1773.809761][T15873] [ 1773.812705][T15873] dump_stack_lvl+0x18c/0x250 [ 1773.817406][T15873] ? load_image+0x420/0x420 [ 1773.821938][T15873] ? show_regs_print_info+0x20/0x20 [ 1773.827187][T15873] ? print_circular_bug+0x12b/0x1a0 [ 1773.832415][T15873] check_noncircular+0x2fc/0x400 [ 1773.837391][T15873] ? print_deadlock_bug+0x5d0/0x5d0 [ 1773.842608][T15873] ? lockdep_lock+0xf5/0x230 [ 1773.847241][T15873] ? _find_first_zero_bit+0xd3/0x100 [ 1773.852539][T15873] __lock_acquire+0x2df1/0x7d40 [ 1773.857423][T15873] ? verify_lock_unused+0x140/0x140 [ 1773.862639][T15873] ? verify_lock_unused+0x140/0x140 [ 1773.867863][T15873] lock_acquire+0x19e/0x420 [ 1773.872383][T15873] ? team_del_slave+0x32/0x1c0 [ 1773.877261][T15873] ? __might_sleep+0xe0/0xe0 [ 1773.881868][T15873] ? read_lock_is_recursive+0x20/0x20 [ 1773.887345][T15873] __mutex_lock+0x136/0xcc0 [ 1773.891952][T15873] ? team_del_slave+0x32/0x1c0 [ 1773.896813][T15873] ? __lock_acquire+0x7d40/0x7d40 [ 1773.901851][T15873] ? rcu_is_watching+0x15/0xb0 [ 1773.906664][T15873] ? trace_contention_end+0x39/0xe0 [ 1773.911936][T15873] ? __mutex_lock+0x315/0xcc0 [ 1773.916655][T15873] ? team_del_slave+0x32/0x1c0 [ 1773.921537][T15873] ? mutex_lock_nested+0x20/0x20 [ 1773.926601][T15873] ? bond_netdev_event+0xeb/0xf20 [ 1773.931749][T15873] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1773.937404][T15873] team_del_slave+0x32/0x1c0 [ 1773.942013][T15873] team_device_event+0x28d/0xa20 [ 1773.946991][T15873] notifier_call_chain+0x197/0x380 [ 1773.952625][T15873] unregister_netdevice_many_notify+0x100d/0x1900 [ 1773.959060][T15873] ? trace_event_raw_event_lock+0x250/0x250 [ 1773.964988][T15873] ? unregister_netdevice_many+0x20/0x20 [ 1773.970667][T15873] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1773.976448][T15873] ? __lock_acquire+0x7d40/0x7d40 [ 1773.981594][T15873] unregister_netdevice_queue+0x32c/0x370 [ 1773.987508][T15873] ? list_netdevice+0x730/0x730 [ 1773.992379][T15873] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1773.998127][T15873] _cfg80211_unregister_wdev+0x16b/0x580 [ 1774.003783][T15873] ieee80211_remove_interfaces+0x49e/0x690 [ 1774.009609][T15873] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1774.014995][T15873] ? rcu_is_watching+0x15/0xb0 [ 1774.019778][T15873] ieee80211_unregister_hw+0x5d/0x2a0 [ 1774.025166][T15873] mac80211_hwsim_del_radio+0x289/0x480 [ 1774.030727][T15873] ? rhashtable_remove_fast+0xc00/0xc00 [ 1774.036290][T15873] hwsim_exit_net+0x58d/0x650 [ 1774.040985][T15873] ? hwsim_init_net+0x90/0x90 [ 1774.045700][T15873] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1774.051708][T15873] cleanup_net+0x70a/0xbb0 [ 1774.056144][T15873] ? ops_free_list+0x3b0/0x3b0 [ 1774.061013][T15873] ? _raw_spin_unlock_irq+0x23/0x50 [ 1774.066236][T15873] ? process_scheduled_works+0x96f/0x15d0 [ 1774.072158][T15873] ? process_scheduled_works+0x96f/0x15d0 [ 1774.077904][T15873] process_scheduled_works+0xa5d/0x15d0 [ 1774.083483][T15873] ? worker_attach_to_pool+0x380/0x380 [ 1774.088961][T15873] ? assign_work+0x3d2/0x5d0 [ 1774.093568][T15873] worker_thread+0xa55/0xfc0 [ 1774.098301][T15873] kthread+0x2fa/0x390 [ 1774.102412][T15873] ? pr_cont_work+0x560/0x560 [ 1774.107387][T15873] ? kthread_blkcg+0xd0/0xd0 [ 1774.111996][T15873] ret_from_fork+0x48/0x80 [ 1774.116499][T15873] ? kthread_blkcg+0xd0/0xd0 [ 1774.121098][T15873] ret_from_fork_asm+0x11/0x20 [ 1774.125884][T15873] [ 1774.159704][T15873] team0: Port device wlan1 removed [ 1774.342555][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1774.357782][T15873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.366157][T15873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.374452][T15873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.382628][T15873] batman_adv: batadv0: Interface deactivated: vlan1 [ 1774.389769][T15873] batman_adv: batadv0: Removing interface: vlan1 [ 1774.400806][T15873] veth1_vlan: left promiscuous mode [ 1774.406758][T15873] veth0_vlan: left promiscuous mode [ 1776.609460][T15873] team0 (unregistering): Port device geneve1 removed [ 1776.728121][T15873] team0 (unregistering): Port device team_slave_1 removed [ 1776.763171][T15873] team0 (unregistering): Port device team_slave_0 removed [ 1776.802846][T15873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.819031][T15873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1776.857733][T15873] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1776.978030][T15873] bond0 (unregistering): Released all slaves [ 1777.037717][T30264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1777.050142][T30264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1777.061590][T30264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1777.090467][T30264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1777.282169][T30264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1777.313076][T30264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.342031][T15873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.349321][T15873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.360669][T15873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.367891][T15873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.605758][T30264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.902775][T30264] veth0_vlan: entered promiscuous mode [ 1777.919966][T30264] veth1_vlan: entered promiscuous mode [ 1777.959947][T30264] veth0_macvtap: entered promiscuous mode [ 1777.972291][T30264] veth1_macvtap: entered promiscuous mode [ 1778.000383][T30264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.012950][T30264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.028841][T30264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1778.040639][T30264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.055626][T30264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.072281][T30264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.082925][T30264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.097846][T30264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1778.108723][T30264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1778.122499][T30264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.142183][T30264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.151259][T30264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.163034][T30264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.178581][T30264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.231875][T30264] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht' [ 1778.272426][T15870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.282910][T30264] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 1778.294685][T15870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.329410][T23824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.346296][T23824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50