last executing test programs: 9.696735721s ago: executing program 4 (id=7471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) r1 = syz_clone(0xa0100200, &(0x7f00000000c0)="c48482c2e525c3f0f38c16f930d89cccdbfbeeb133b8ac012e2512df1be62929f596bdba5a2477b249ce7cc459848dfb07aa22497bc36942aa3f9f1666389e5d28e5167a7db78ff5bf", 0x49, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="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") ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)={0xde9765d904456293, 0x5, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}, @multicast, @random="54942cc95b67", @local, @multicast]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000300)={'bond_slave_0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000003c0)=r4, 0x12) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000440)=r4, 0x12) syz_clone(0x8004000, &(0x7f0000000480)="b4e5bae219d87923c5818886b3899e9693c3feb6d946ccaa57073120466ed847c1d1957ced03be8180643e9f07b0445c83c6fc3033653e0420feb79f55f3c0e49c7e7c541113a904b8a36899bb2de8b0c54ba667ffc77f8afd970851802adba9cf4999fa3218", 0x66, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="d9a2dd66870d7b33c582b0c9ab1558868eefd54f31a4f25afcab5a31eb7c20ebadd6dbe9d67b8fc9faac126e6a94f9ac899443a4340d5ea42d2b5acebec3827d8ac38716c2c55d2fb699b427d40a1fdf451a85a367e8de52df") syz_open_procfs$namespace(r1, &(0x7f0000000600)='ns/time_for_children\x00') r6 = openat$cgroup_ro(r5, &(0x7f0000000640)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000980)={&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000740)="caee16ccff414f79a2b8f9c3240b7eed58e9ece7c7ce90f9fc6cd64a81c58c43346c6fc33ac7327f7f9e937411d9d3895c4d5402959d7a4af5412a448b94f4312b30b803311d99c866cceaa985188268e76ccf0f20f91318e0ccce08a83f60504d824f965ccc1a90597eb97d5e3bfbec31b2a50c2177f98c93720facd42a8f549c276eaf74f3e63a005d1c67841a8504c1b34e7951ce2b0e44f7f1fa6125e9bcee21fc27fcbce4fff5281e762069a7b5757acea8b5cd14bb742806f7fe3eeb05a6393fbb1b1257a39683fa08fbb56ca1f654a5ae817936fc0ac6707d09e115d8d363e51b", 0xe4}, {&(0x7f0000000840)="79ee1c450075b67286421fc60c80b1536345a64af3cd27e7d665a5341cfe2d47c22fd37e04b572ba824723da3c", 0x2d}, {&(0x7f0000000880)="52c21591edab411f8e9c931b5bb2c5b7b80b543c9bc77e564155f679681c639f04dce2a7ef67a2a611ffb43c68306fa6c78ec7796a7a55282e0395d64ceddddf8d761f3d75a16ba747476e8135c305b3f631b946f2ce29c8e603d720e52920cad069a04b63d5656c1b33a08bedcef20d767a9631912d", 0x76}, {&(0x7f0000000900)="5c4d6bca323bf0176e659c218882d2255ab5743315cf4a7f1f57a1f6b3058d83781c09aced48624cffbda8a974b872", 0x2f}], 0x4, 0x0, 0x0, 0x20008040}, 0x44010) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000009c0)=0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r5, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000b80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x10, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x1, 0x7, 0x137c6ecd04ab4e07, 0x1, 0x30, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', r8, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x0, 0x7, 0xfffffff6, 0xa}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000e00)=[{0x0, 0x2, 0xd, 0x6}, {0x0, 0x4, 0xd, 0x8}, {0x4, 0x3, 0x1, 0xa}, {0x1, 0x3, 0xa, 0x8}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x14}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x20, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30b1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='GPL\x00', 0x6, 0xd3, &(0x7f0000001080)=""/211, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000011c0)={0x5, 0x6, 0x10000, 0xf}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001200)=[{0x3, 0x4, 0xc, 0x5}], 0x10, 0x79c6}, 0x94) perf_event_open(&(0x7f0000001340)={0x5, 0x80, 0x8, 0x9c, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x200, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x817f, 0x0, @perf_bp={&(0x7f0000001300), 0x5}, 0x20, 0xc, 0xcaf2, 0x0, 0x5, 0x7fffffff, 0xd3, 0x0, 0x4, 0x0, 0x8001}, r1, 0xffffffffffffffff, r6, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001440)={r5, 0x58, &(0x7f00000013c0)}, 0x10) r9 = openat$cgroup(r5, &(0x7f0000001480)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f00000014c0)='tasks\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x11) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003780)={&(0x7f0000001500)="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", &(0x7f0000002500)=""/244, &(0x7f0000002600)="2730c1e3a97ff26ba0d7361261f72f6b1a23c2a07a30233c7a0015dbdb5ba8c3828c91d5de822ac4dda84a33cf7f54b4f210ea834fdb60c2f5c666a3b723d2331c4090e30f34e395eb90771885adcc8e04a778217c4c71824f89f96737308e51ab0ed46297b169074f3cc9c2f9e6d43a7878fb95a07f3dd85f4d60807ce821f1de08bc3913555a3fcdcb27bd0192599a8fefe4c6a1a2f9ea21d49eb5c3f4cf6697b827a23373cb546d345cb9b7f7c57f1a175a82864dd8a927df39d8cea0a88819fda9c8e5184fd090052fb73f5ca85e98167180d1a337df4ecade34420297ff5e715a10d9b5718bef76cbffdcd87ffa98861bbff7cb", &(0x7f0000002700)="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", 0x6, 0xffffffffffffffff, 0x4}, 0x38) 8.979650749s ago: executing program 3 (id=7475): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, 0x0, 0x804) close(r0) 8.501933992s ago: executing program 4 (id=7478): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5db1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x401}, 0x1a00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0xeb, &(0x7f0000000880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x5, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e]}}, &(0x7f0000000b00)=""/143, 0x27, 0x8f, 0x1, 0x8000, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0xa, &(0x7f00000005c0)=@raw=[@call={0x85, 0x0, 0x0, 0x31}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000640)='GPL\x00', 0x2, 0xf8, &(0x7f00000006c0)=""/248, 0x41100, 0x42, '\x00', r4, 0x1a, r5, 0x8, &(0x7f0000000c00)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x25471, 0xffffffffffffffff, 0x6, &(0x7f0000000c40)=[0x1, r3, r3, r3, r3, r3, r0, r3, r3, r3], &(0x7f0000000c80)=[{0x2, 0x1, 0x9, 0x5}, {0x5, 0x3, 0x7, 0x5}, {0x1, 0x2, 0x3, 0xa}, {0x0, 0x2, 0x10, 0x6}, {0x6, 0x3, 0x2, 0x1}, {0x0, 0x3}]}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x36, 0x8, 0x6, &(0x7f00000002c0)}}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x890d, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) 8.397206544s ago: executing program 3 (id=7480): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8915, &(0x7f0000001cc0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xa) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x7a6, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000003000000000000000d0000008520000005000000185a00000a000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002c66a0085000000820000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x6a34db59, 0xb9, &(0x7f0000000600)=""/185, 0x41100, 0x5e, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x8, 0x1, 0xffff40f3}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000a00)=[r1, r2], &(0x7f0000000a40)=[{0x0, 0x5, 0x0, 0xc}, {0x0, 0x5, 0x4, 0xe}, {0x2, 0x3, 0xa, 0x7}, {0x5, 0x5, 0x2, 0xb}, {0x2, 0x2, 0xd, 0x3}, {0x3, 0x2, 0xe}, {0x1, 0x3, 0x1, 0x4}, {0x2, 0x5, 0x1, 0xa}, {0x5, 0x2, 0xb, 0x9}, {0x4, 0x2, 0x7, 0x1}], 0x10, 0x21}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_config_ext={0x6, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x3, 0x9, 0x5, 0x7fff, 0xe, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x3) 5.06865998s ago: executing program 3 (id=7486): r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xcb, 0xff, 0x2, 0x92, 0x0, 0x480, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x8, 0x2, 0xb5a9, 0x9, 0xfff, 0x8, 0x1, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, r0, 0xb) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="000003000000000095"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) 5.026362821s ago: executing program 4 (id=7487): r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0xc, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x100000, 0x0, 0x80000000, 0xa}, {0x1000000a, 0x4, 0xfffffffe}], 0x10, 0x9}, 0x94) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (rerun: 64) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acb}, 0x0, 0x7, 0x0, 0x4, 0x400, 0x4, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffd8c, 0x0}, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) (async) close(0x3) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x1c) 4.907810844s ago: executing program 2 (id=7488): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\a\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5db1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x4, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304020000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed69000000000000000000000000009a6d1852cfe790362ca800000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c9534229d6133fa814a0a67385fea04220423"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="76389e14050000007583ddd08906a5", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.568875829s ago: executing program 0 (id=7492): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x117f, 0x2, 0x2, 0x101, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.568294019s ago: executing program 3 (id=7493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x1f, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, 0xffffffffffffffff, 0x15, 0x2a, r0, @void, @void, @void, @value=r3, r1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r5 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r5, 0x110, 0x2, &(0x7f0000000140), 0x16) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0x1) 3.403613713s ago: executing program 1 (id=7494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB="00005a6146941b7d54b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000fb7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r1, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) 3.366160374s ago: executing program 4 (id=7495): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000020000000000000000010000040018ed700000000001000000010000000000b68318bd5a3f0e875dcd40ff139e8fb18c7241747fe16c84fd7b7e36f4572df38d074c6aab5249fac744639f9be2a81744298505f7d99bd66b36fa7038ee4b15a04e38f8181fe9ca0c9ceaf3b86704e70b0fb653d93a82b157ec950d050c64e32c164a1bb39232b43ee398e224e6d16553969831a5b8b93d453d80b463c95bc7e18e5b17d0525ce0800320d67c3033da7e00c70f88613b08eeaf760435f2f63d"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000dfffffffffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0xd, 0x4, 0x4, 0x4b, 0x0, 0x1, 0x40000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb, 0x2, @perf_config_ext={0x3, 0xe8d}, 0x10090, 0x9, 0x30b, 0x9, 0x4e, 0x6, 0x101, 0x0, 0x4, 0x0, 0x100000000}, r2, 0x1, r3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00k'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000840), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="02000000c000"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 3.347033325s ago: executing program 2 (id=7496): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xffffff95, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0)=r1, 0x55) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe002, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4972}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff9d27}}], 0x60}, 0x844) 3.342471585s ago: executing program 0 (id=7497): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x42040}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000740)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x21, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x2, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000001000000fa11919bfb7e7605fb0cbfb0819fac04e264f54edbf64ddb6be101e8ce5376cc21598b8e95882a06d1e8f04bab12474fbf416f27fe5db34ef13b5d0065ab295c75f1d1cb3bfe8b7216cd38faa419367a08bec5b62040cd5208ba899eb63f661f3c5166c4cc7258eb7b0bac35ef17014a5e0fdf0e", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r9, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073010f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r0, 0x2f, 0x1, 0x7, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES32=r4], 0x20) 3.191156988s ago: executing program 1 (id=7498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100), 0x22}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0xffffffffffffff97, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4fc00000061103000000000004500000078b2bb6e7393d13000000000cc8f8663f6945ac906edfa64dda65c6cc8386de77bc4061359267863ec1a8c8d87857907bddaa74e0248b444268a41e62c0f92b9705dd235ab7c91db6391153072887b0e4642ad630ca11f4fa8a1c4209bb82dfe288f75eb662abfc93215c04be5571afc17413c96ffb2ddf2d3c319c60de8a45fd201527a001d50e0562bc75d020bb43836836e19b08972bf11d3da385d5a2922336299c1b3fe"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x3, [@union={0x5, 0x2, 0x0, 0x5, 0x0, 0xffffffff, [{0x3, 0x1, 0x7f}, {0x4, 0x5, 0x9e}]}, @datasec={0x9, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x5, 0x10001}, {0x5, 0x0, 0xd}, {0x2, 0xfffffff1, 0xf67}, {0x5, 0xf, 0x4}], "e2"}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x40}}, @var={0xb, 0x0, 0x0, 0xe, 0x2, 0x2}, @fwd={0x9}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0xfffffff9, [{0x4, 0x3, 0x7}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @enum64={0x5, 0x1, 0x0, 0x13, 0x1, 0x6, [{0xe, 0x9}]}, @const={0x7, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000bc0)=""/9, 0x107, 0x9, 0x1, 0x10}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4280, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'veth0_macvtap\x00', 0x20}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000a0000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x3}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b2, 0x2, @perf_bp={&(0x7f0000000900), 0x1}, 0x200, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) 3.053949372s ago: executing program 3 (id=7499): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000740)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0x449a349b67b8a9da, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ec}, 0x0, 0x0, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x4e0d1c98, 0x7}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r1}, &(0x7f0000001c40), &(0x7f0000001c80)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xd28, 0x300, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xf7be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710046000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket$kcm(0x29, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, &(0x7f0000000000)={r5}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a80)=""/209, 0xd1}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/111, 0x6f}], 0x3, &(0x7f0000001c40)=""/122, 0x7a}, 0x30) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) 2.909909576s ago: executing program 2 (id=7500): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x11928a, 0x7, 0xeffffffc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x8004}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000c348e8eaa38633321fc4a4", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0xe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380), 0xc) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x25, 0x6, 0xffffffbf, 0x0) 2.755643629s ago: executing program 1 (id=7501): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x804) close(r0) 2.70645027s ago: executing program 0 (id=7502): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x10c027, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x8}}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004010) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.661096272s ago: executing program 2 (id=7503): r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xcb, 0xff, 0x2, 0x92, 0x0, 0x480, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x8, 0x2, 0xb5a9, 0x9, 0xfff, 0x8, 0x1, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, r0, 0xb) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="000003000000000095"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) 2.531260785s ago: executing program 1 (id=7504): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff04800000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0), 0x55) 1.551378791s ago: executing program 0 (id=7505): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf8, 0x8, 0x9, 0x8, 0x0, 0x0, 0x10200, 0x4e4cb3d159ab7ddb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffff30}, 0x1000, 0xfffffffffffff056, 0x7, 0x1, 0x9, 0x8, 0x1, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xf, 0x5}, 0x108aa2, 0xc78, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x84) (async, rerun: 32) r2 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x1c5}, 0x48) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) (async) openat$cgroup_int(r3, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) (async) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r2, 0x0, 0x4000001) (async, rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) (rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000070000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000"], &(0x7f0000000080)='syzkaller\x00', 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e060547e00000000566009e103e3", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000040)='syz1\x00', 0x1ff) r9 = syz_clone(0x40042000, &(0x7f00000003c0)="ffb566713f480eedeb3b69f20dcccdff4a3f623ef01e5c0f6a7b9fbcdd9c38ebc8b316bb1a1c2cf75e142d14c3366a46065ab382153bdae072a1bfcc1fb9bceeb2c580f8826367b8d103e27c392638a674593d64dfb823acb9ff36e468893fa805795124223b2c8901fdf0702841e0797dc0c4ff9a46554f1df27cd082f1396f30e8a1df7fe7d6", 0x87, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="20bc3a6f3554b1cae6e8244e7bf824f576e371bd35925cfc5a7deea152e070943c3d1b6ac2a9d5b416dd0b29e98794026fcdd1b2e0852b692f4d782ee2d5abc8b7d6796ece37f719fa9110f154352e432fd6b46d328e3f9fcf5c6924cc39b8d158b9ad30345a8f6f27e4a1f0ba843a42f0306d5ad020b14e63cead98d9340afb63620b1794efadf12148dbc52118df118959b0a798957140219520ada340ad7e43e7656fd4c99bfc87c7d721239f0b8f88b5bdc84e2845db4b5a2126bfff343a5184d29b48cb") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r9, r1, 0x0, 0x1, &(0x7f0000000680)='\x00'}, 0x30) 1.269163267s ago: executing program 4 (id=7506): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x8000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8065, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x81}, 0x10c002, 0x1000000000ac5d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xf, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x13, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sk_skb}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x123200, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x3, 0x2000000, 0x0, 0x8c, &(0x7f0000000440), &(0x7f0000000840)="60973ae29b9f1d6547a581137749fdb6dc038744d905faf37a394e119262473640382204fbe789c56ac1db548fc65c1919ae215ee78a3cbda33ae6e4d1cf05fe4b9b063b7318a45e36cfa517eeb8d2c61f3a0fcf4200c1f993b7023328bdf2f4ffa5c93b6510ac3607f3ab29e78ec58dbef35dc1adfc96d18179c3b705bafeb6bf9d6cd8ce39b35fa842da08"}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000680)={'veth0_vlan\x00', @random="d515ec6a77a8"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0xffffff43, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8903, &(0x7f00000005c0)) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) r9 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2, 0x10000, 0x8000c2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x3, &(0x7f0000002900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x14}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socket$kcm(0x10, 0x2, 0x0) 347.437482ms ago: executing program 2 (id=7507): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x117f, 0x2, 0x2, 0x101, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 291.253872ms ago: executing program 1 (id=7508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000080)="5c00000013006bfc9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac0040007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000a00ffffc6c9530000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x80}]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x40, 0x24, 0xff}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) (async) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80", @ANYRESDEC], 0xffdd) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) 288.410943ms ago: executing program 0 (id=7509): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0099daab4dbe4a6847005b6dc296000000000000000001000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0099daab4dbe4a6847005b6dc296000000000000000001000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="004f0200000000000002000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="004f0200000000000002000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) (async) openat$cgroup_ro(r7, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$kcm(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) (async) recvmsg$kcm(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 253.069514ms ago: executing program 3 (id=7510): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f00000000c0), 0xb9) close(r0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)='d', 0xfffd}], 0x1}, 0x22044880) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000700), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000008510000018"], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r6}, &(0x7f0000001c40), &(0x7f0000001c80)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xf7be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000070000007fffffff8d000000b8"], 0xd0}, 0x480c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$sock(r2, &(0x7f00000006c0)={&(0x7f0000000280)=@isdn={0x22, 0x2, 0xf, 0x10, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)="bfef68ee009c27b9d8cef924abe6c6cf24f6f5f419fc9802df2bd9e42ef923b7831992b11d18c67caa157beec8c706a827689c003d7bb6fd620347040ab104ea3f0754cefc1b0e7e555a1cd8d7ee27560ef2c7a66abd48ed4b846e7a996bfa28114f3ff6e6e2d24740223ebb22a41b20015738e7567f9ed5f86fb6346518430bdd500795f9c82aaabbb73b01d8f3a435efb95d6d49e451373af8680e", 0x9c}, {&(0x7f0000000400)="9332decc0cf042577c1e3548164e1f14c8c9fdbc3d7ebdd464c8f27180181fdc97a97b9b5a066fcc47c8677701810b1bd46d6444380e814b653346d4f11a552bb4830d6f41ba2da7fb57f0b907d7fbd3ddd8b50878b6e0824fb02755abaac2d3deb6d0be9828a054e141ed3047e102333c8f653694a59a18a12cfc947b18cff58a9fefd63357e203c6f837ed1922e0c6a35bbc8db7814b6869c8ee7098e3310ff48f8db3e3ce93f8c453f5bfd85d1c66ddc2bf5e0f13d5a05fca053707676e4f8c0cd3feeac8ab5c1c4dbb374082bc3e26bac16b270bae8f4022b84a037b6fc51cf11fc930bd7e88", 0xe8}, {&(0x7f0000000500)="c01eb685179f77ecad5a67e071614676f66570bd8e37ce44a12733ccff114b9d636f3714335939fad5e5364bcc825852a953e0421bc197143b61a561d5f8b0fee86b055e11c2a6f498def22cc832f42ad8c4e62e19d4174338f28d282f1454430ebd73127bc9a2e3959ac980211166cfcccae2d54d4095de18e70bb221fdd76ac3ff771aada8dee7ba7e4a6a8a", 0x8d}, {&(0x7f00000005c0)="4f852413e57b0ad26905098ce8c4653b91e1aa67610519691474abdf09fa4316376adcf9c1992803f6dc9f8e2ccba25dacc4f6", 0x33}], 0x4, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff2780}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x78}, 0x40000c0) 193.025425ms ago: executing program 2 (id=7511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086e3", 0x0, 0xfe1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007032400000004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x9) ioctl$TUNSETLINK(r5, 0x400454cd, 0x324) 119.284997ms ago: executing program 1 (id=7512): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x8, 0xf, 0x0, 0x1, 0xb69}, 0x50) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c034004000000002000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000040000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x303) 117.238537ms ago: executing program 4 (id=7513): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x11928a, 0x7, 0xeffffffc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x40004}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000c348e8eaa38633321fc4a4", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0xe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380), 0xc) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x25, 0x6, 0xffffffbf, 0x0) 0s ago: executing program 0 (id=7514): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x804) close(r0) kernel console output (not intermixed with test programs): tman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.031761][T21944] netlink: 'syz.1.5834': attribute type 10 has an invalid length. [ 802.041589][T21944] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5834'. [ 802.085356][T21896] device hsr_slave_0 entered promiscuous mode [ 802.123271][T21896] device hsr_slave_1 entered promiscuous mode [ 802.130052][T21896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.143807][T21896] Cannot create hsr debugfs directory [ 802.402350][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 802.483674][T21896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.604231][T21970] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5843'. [ 802.639552][T21896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.662413][T21970] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5843'. [ 802.786877][T21896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.929540][T21896] bond0: (slave netdevsim0): Releasing backup interface [ 802.958991][T21896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.037784][T21984] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5849'. [ 803.226977][T21896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.266986][T21896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.289483][T21896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.339281][T21896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 803.422929][T21896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.464069][T21896] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.489062][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 803.511718][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.534809][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 803.552629][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 803.573216][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.580389][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.614939][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 803.636257][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 803.648831][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 803.670995][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.678483][T11899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.724874][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 803.775283][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 803.799942][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 803.827040][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 803.893492][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 803.941965][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 803.950873][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 803.988343][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 804.001107][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 804.055681][T21896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.068829][T21896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 804.078031][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 804.102741][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 804.411234][T22023] validate_nla: 7 callbacks suppressed [ 804.411266][T22023] netlink: 'syz.3.5860': attribute type 10 has an invalid length. [ 804.435202][T22023] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5860'. [ 804.474903][T22023] netlink: 'syz.3.5860': attribute type 10 has an invalid length. [ 804.484961][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 804.673187][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 804.680787][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 804.732899][T21896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.762254][T22038] netlink: 'syz.3.5864': attribute type 10 has an invalid length. [ 804.830412][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 804.853082][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 804.907143][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 804.917740][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 804.939720][T21896] device veth0_vlan entered promiscuous mode [ 804.951713][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 804.988134][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 804.999214][T22044] netlink: 'syz.2.5868': attribute type 3 has an invalid length. [ 805.022865][T22044] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5868'. [ 805.048194][T21896] device veth1_vlan entered promiscuous mode [ 805.082785][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 805.093023][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 805.105985][T21896] device veth0_macvtap entered promiscuous mode [ 805.118273][T21896] device veth1_macvtap entered promiscuous mode [ 805.156588][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.168893][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.188256][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.199974][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.230769][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.242310][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.264072][T21896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.288594][T22053] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5871'. [ 805.312413][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 805.349986][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 805.384680][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 805.403007][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.430954][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.445631][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.456826][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.514083][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.530596][T21896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.541406][T21896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.559590][T21896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.584704][T22057] netlink: 'syz.4.5873': attribute type 10 has an invalid length. [ 805.616104][T22057] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5873'. [ 805.652623][T22062] netlink: 'syz.4.5873': attribute type 10 has an invalid length. [ 805.706853][T22065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5875'. [ 805.738235][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 805.753637][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 805.771395][T21896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.811372][T21896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.835802][T21896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.850537][T21896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.173145][ T4657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.195609][ T4657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.279648][T22079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5878'. [ 806.301158][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 806.325939][ T4654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.356602][ T4654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.425662][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 806.562818][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 806.877824][T22100] netlink: 'syz.1.5886': attribute type 9 has an invalid length. [ 806.900305][T22100] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.5886'. [ 807.285909][T22115] netlink: 'syz.4.5891': attribute type 10 has an invalid length. [ 808.200448][T22129] netlink: 'syz.0.5895': attribute type 5 has an invalid length. [ 808.642331][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 808.804104][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.810459][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.144093][T22159] netlink: 'syz.2.5907': attribute type 10 has an invalid length. [ 809.300414][T22164] syz.1.5909[22164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.300570][T22164] syz.1.5909[22164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 809.507669][T22171] netlink: 'syz.2.5912': attribute type 10 has an invalid length. [ 810.247176][T22200] netlink: 'syz.0.5922': attribute type 10 has an invalid length. [ 810.841647][T22200] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 811.415616][ T4287] Bluetooth: hci2: ISO packet for unknown connection handle 19 [ 811.830707][T22237] netlink: 'syz.1.5938': attribute type 10 has an invalid length. [ 812.808740][T22283] netlink: 'syz.1.5955': attribute type 10 has an invalid length. [ 813.788951][T22331] netlink: 'syz.2.5971': attribute type 10 has an invalid length. [ 815.057282][T22374] netlink: 'syz.0.5987': attribute type 10 has an invalid length. [ 815.568677][T22388] netlink: 'syz.2.5992': attribute type 22 has an invalid length. [ 815.598699][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 815.607768][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 815.613031][T22388] netlink: 'syz.2.5992': attribute type 2 has an invalid length. [ 815.642627][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 815.649808][T22388] netlink: 'syz.2.5992': attribute type 4 has an invalid length. [ 815.667685][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 815.670960][T22388] netlink: 'syz.2.5992': attribute type 8 has an invalid length. [ 815.687361][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 815.695230][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.702581][T22388] netlink: 'syz.2.5992': attribute type 9 has an invalid length. [ 815.710660][T22388] netlink: 'syz.2.5992': attribute type 10 has an invalid length. [ 815.719520][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'. [ 815.860947][T13670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.089075][T13670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.211537][T13670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.385656][T13670] bond0: (slave netdevsim0): Releasing backup interface [ 816.404562][T13670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.505410][T22394] chnl_net:caif_netlink_parms(): no params data found [ 816.903314][T13670] tipc: Left network mode [ 816.917703][T22394] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.965478][T22394] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.990259][T22394] device bridge_slave_0 entered promiscuous mode [ 817.010160][T22428] netlink: 'syz.1.6003': attribute type 10 has an invalid length. [ 817.208806][T22394] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.294426][T22394] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.331163][T22394] device bridge_slave_1 entered promiscuous mode [ 817.729602][T22394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.760124][T22394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.773309][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 817.961459][T22453] netlink: 'syz.2.6011': attribute type 10 has an invalid length. [ 818.004377][T22453] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6011'. [ 818.116135][T22394] team0: Port device team_slave_0 added [ 818.194467][T22394] team0: Port device team_slave_1 added [ 818.237033][T22394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.248813][T22465] __sock_release: fasync list not empty! [ 818.277472][T22394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.379813][T22394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.507123][T22472] netlink: 'syz.0.6016': attribute type 10 has an invalid length. [ 818.523437][T22394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.530449][T22394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.659211][T22394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.834320][T22394] device hsr_slave_0 entered promiscuous mode [ 818.867285][T22394] device hsr_slave_1 entered promiscuous mode [ 818.908148][T22394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.951908][T22394] Cannot create hsr debugfs directory [ 819.482382][T13670] device wlan1 left promiscuous mode [ 819.534586][T13670] team0: Port device wlan1 removed [ 819.845463][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 820.326818][T13670] device team0 left promiscuous mode [ 820.346280][T13670] device C left promiscuous mode [ 820.366390][T13670] device team_slave_1 left promiscuous mode [ 820.401200][T13670] device geneve1 left promiscuous mode [ 820.415018][T13670] ¥: port 1(team0) entered disabled state [ 820.493202][T13670] device hsr_slave_0 left promiscuous mode [ 820.631181][T13670] device hsr_slave_1 left promiscuous mode [ 820.744363][T13670] device veth0_vlan left promiscuous mode [ 821.075503][T13670] team0 (unregistering): Port device geneve1 removed [ 821.662922][T13670] team0 (unregistering): Port device team_slave_1 removed [ 821.702700][T13670] team0 (unregistering): Port device C removed [ 821.739298][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.784505][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.826210][T13670] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 821.925835][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 822.068761][T13670] bond0 (unregistering): Released all slaves [ 822.118910][T22532] netlink: 'syz.2.6028': attribute type 4 has an invalid length. [ 822.127525][T22530] netlink: 'syz.1.6030': attribute type 10 has an invalid length. [ 822.739722][T22394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.829612][T22394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.867595][T22394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.901459][T22394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 823.230896][T22394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.247683][T22582] netlink: 'syz.2.6043': attribute type 10 has an invalid length. [ 823.325201][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 823.336247][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 823.371471][T22394] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.402867][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.434460][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.473014][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.480145][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.531601][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 823.557843][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 823.608226][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 823.624794][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.632009][ T4657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.655356][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 823.730082][T22587] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6045'. [ 823.748030][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 823.777288][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 823.821420][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 823.869048][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 823.931951][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 823.940691][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 823.966048][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 823.988481][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 824.012279][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 824.034454][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 824.051608][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 824.066725][T22394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 824.579075][T22614] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6051'. [ 824.759038][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 824.769109][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 824.801036][T22394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.850004][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 824.869711][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 824.933914][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 824.949406][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 824.971182][T22394] device veth0_vlan entered promiscuous mode [ 824.978932][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 824.999407][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 825.033046][T22394] device veth1_vlan entered promiscuous mode [ 825.110832][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 825.131100][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 825.161356][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 825.186880][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 825.210744][T22394] device veth0_macvtap entered promiscuous mode [ 825.237122][T22394] device veth1_macvtap entered promiscuous mode [ 825.268203][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.286566][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.305918][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.318360][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.333290][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.344541][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.356497][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.367737][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.379924][T22394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.397385][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.408251][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.418616][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.438727][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.458509][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.469469][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.480629][T22394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.491660][T22394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.503538][T22394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.512417][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 825.521142][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 825.530521][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 825.550564][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 825.560280][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 825.580685][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 825.597754][T22394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.614337][T22394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.630112][T22394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.640478][T22394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.192027][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.199895][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.224460][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 827.252518][ T4657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.260379][ T4657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.314717][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 827.383772][T22655] netlink: 'syz.2.6055': attribute type 10 has an invalid length. [ 829.369836][T22712] netlink: 'syz.2.6073': attribute type 10 has an invalid length. [ 830.517001][T22755] netlink: 'syz.3.6089': attribute type 10 has an invalid length. [ 830.678278][T22755] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 832.081556][T22798] netlink: 'syz.0.6105': attribute type 10 has an invalid length. [ 832.288681][T22802] netlink: 'syz.3.6104': attribute type 25 has an invalid length. [ 832.423754][T22802] netlink: 'syz.3.6104': attribute type 28 has an invalid length. [ 833.747982][T22838] netlink: 'syz.4.6121': attribute type 10 has an invalid length. [ 835.560842][T22880] netlink: 'syz.1.6136': attribute type 10 has an invalid length. [ 836.347361][T22907] netlink: 'syz.1.6146': attribute type 4 has an invalid length. [ 836.393499][T22907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6146'. [ 837.151219][T22923] netlink: 'syz.3.6151': attribute type 10 has an invalid length. [ 837.640240][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 837.650042][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 837.658474][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 837.667859][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 837.677228][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 837.684888][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 838.566753][ T4657] bond0: (slave netdevsim0): Releasing backup interface [ 838.654154][T22934] chnl_net:caif_netlink_parms(): no params data found [ 838.863709][T22966] tun0: tun_chr_ioctl cmd 1074812118 [ 838.890681][T22968] netlink: 'syz.3.6166': attribute type 10 has an invalid length. [ 839.023810][T22974] netlink: 'syz.1.6167': attribute type 10 has an invalid length. [ 839.067355][T22934] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.099969][T22934] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.133411][T22934] device bridge_slave_0 entered promiscuous mode [ 839.170003][T22934] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.198251][T22934] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.249390][T22934] device bridge_slave_1 entered promiscuous mode [ 839.437495][T22934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.493153][ T4657] tipc: Left network mode [ 839.512385][T22934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.757253][T22934] team0: Port device team_slave_0 added [ 839.772111][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 839.785817][T22934] team0: Port device team_slave_1 added [ 839.942203][T22934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.969516][T22934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.091907][T22934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.262509][T22934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.273081][T22934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.369591][T22934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.584938][T22934] device hsr_slave_0 entered promiscuous mode [ 840.602873][T22934] device hsr_slave_1 entered promiscuous mode [ 840.620519][T22934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.639048][T22934] Cannot create hsr debugfs directory [ 840.696481][T23023] netlink: 'syz.0.6182': attribute type 10 has an invalid length. [ 841.366801][ T4657] team0: Port device wlan1 removed [ 841.690023][ T4657] device hsr0 left promiscuous mode [ 841.714372][ T4657] nr0: port 1(hsr0) entered disabled state [ 841.811036][ T4657] device hsr_slave_0 left promiscuous mode [ 841.883499][T23052] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6189'. [ 841.890628][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 841.900972][ T4657] device hsr_slave_1 left promiscuous mode [ 841.961645][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.984015][T23051] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6189'. [ 841.993589][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.019376][T23051] netlink: zone id is out of range [ 842.023747][T23052] netlink: zone id is out of range [ 842.030998][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.041297][T23052] netlink: zone id is out of range [ 842.052146][T23051] netlink: zone id is out of range [ 842.057585][T23051] netlink: zone id is out of range [ 842.066098][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.088702][T23052] netlink: zone id is out of range [ 842.104886][T23051] netlink: get zone limit has 8 unknown bytes [ 842.142208][T23052] netlink: get zone limit has 8 unknown bytes [ 842.159642][ T4657] device veth1_vlan left promiscuous mode [ 842.179358][ T4657] device veth0_vlan left promiscuous mode [ 842.674924][ T4657] team0 (unregistering): Port device geneve1 removed [ 843.457614][ T4657] team0 (unregistering): Port device team_slave_1 removed [ 843.551682][ T4657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.603557][ T4657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.654119][ T4657] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 843.922026][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 843.944616][ T4657] bond0 (unregistering): (slave team0): Releasing backup interface [ 843.977993][ T4657] bond0 (unregistering): Released all slaves [ 844.024493][T23038] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6186'. [ 844.040396][T23072] netlink: 'syz.0.6193': attribute type 10 has an invalid length. [ 844.912465][T22934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 844.952835][T22934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 844.982902][T22934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 845.045186][T22934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 845.315692][ T4657] tipc: Left network mode [ 845.584868][T23125] netlink: 'syz.3.6209': attribute type 10 has an invalid length. [ 845.723128][T22934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.798268][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 845.810445][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.910628][T22934] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.968561][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.990532][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 846.003685][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 846.061256][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.068642][ T4654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.241472][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 846.371957][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 846.380804][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 846.410408][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.417641][ T4654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.457648][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 846.489215][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 846.528232][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 846.572143][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 846.679566][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 846.692602][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 846.729235][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 846.758812][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 846.782732][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 846.827271][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 846.859055][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 846.904277][T22934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 847.171480][T23176] netlink: 'syz.2.6222': attribute type 10 has an invalid length. [ 847.991309][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 848.050226][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 848.118708][T22934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.204452][ T4657] device bridge_slave_1 left promiscuous mode [ 848.210735][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.289873][ T4657] device bridge_slave_0 left promiscuous mode [ 848.317656][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.458945][ T4657] device veth1_macvtap left promiscuous mode [ 848.472159][ T4657] device veth0_macvtap left promiscuous mode [ 848.478309][ T4657] device veth1_vlan left promiscuous mode [ 852.038321][ T4657] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 852.140758][ T4657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.186685][ T4657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.248652][ T4657] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 852.432910][ T4657] bond0 (unregistering): Released all slaves [ 852.529844][T23230] netlink: 'syz.2.6234': attribute type 10 has an invalid length. [ 853.461067][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 853.527951][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 853.620636][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 853.640654][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 853.674830][T22934] device veth0_vlan entered promiscuous mode [ 853.688701][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 853.713735][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 853.758036][T22934] device veth1_vlan entered promiscuous mode [ 853.833541][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 853.863400][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.898208][T22934] device veth0_macvtap entered promiscuous mode [ 853.919283][T23297] netlink: 'syz.3.6251': attribute type 10 has an invalid length. [ 853.938485][T22934] device veth1_macvtap entered promiscuous mode [ 853.988797][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.009137][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.031346][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.048510][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.059621][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.076986][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.090105][T22934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.105474][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 854.119628][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 854.136578][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 854.163115][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 854.204404][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.220004][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.240543][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.272162][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.291901][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.322855][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.342843][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.363327][T23309] netlink: 'syz.2.6255': attribute type 10 has an invalid length. [ 854.381862][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.393466][T23309] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6255'. [ 854.408040][T22934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.421155][T23309] openvswitch: netlink: Flow key attr not present in new flow. [ 854.432898][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 854.445727][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 854.469009][T22934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.492025][T22934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.511007][T22934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.531838][T22934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.770044][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.819038][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.836623][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.892379][ T4661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.912521][ T4661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.951243][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 855.293672][T23335] netlink: 'syz.1.6264': attribute type 10 has an invalid length. [ 855.641154][T23349] netlink: 'syz.4.6269': attribute type 5 has an invalid length. [ 855.649092][T23349] netlink: 'syz.4.6269': attribute type 1 has an invalid length. [ 855.678113][T23349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.935518][T23357] netlink: 'syz.1.6272': attribute type 29 has an invalid length. [ 855.952347][T23357] netlink: 'syz.1.6272': attribute type 29 has an invalid length. [ 855.962938][T23357] netlink: 'syz.1.6272': attribute type 29 has an invalid length. [ 855.971515][T23357] netlink: 'syz.1.6272': attribute type 29 has an invalid length. [ 857.529606][T23395] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.6286'. [ 858.003553][T23419] validate_nla: 1 callbacks suppressed [ 858.003588][T23419] netlink: 'syz.3.6296': attribute type 10 has an invalid length. [ 858.328234][T23430] netlink: 'syz.2.6298': attribute type 11 has an invalid length. [ 858.427087][T23430] netlink: 184220 bytes leftover after parsing attributes in process `syz.2.6298'. [ 858.486177][T23430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.948783][T23465] netlink: 'syz.3.6311': attribute type 10 has an invalid length. [ 860.953075][T23508] netlink: 'syz.4.6327': attribute type 10 has an invalid length. [ 861.088710][T23508] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 861.523702][T23523] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6332'. [ 861.557464][T23523] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 862.379012][T23551] netlink: 'syz.3.6342': attribute type 10 has an invalid length. [ 863.527020][T23592] netlink: 'syz.0.6359': attribute type 10 has an invalid length. [ 864.957994][T23635] netlink: 'syz.4.6376': attribute type 10 has an invalid length. [ 866.529619][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 866.544315][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 866.603307][ T4657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.645889][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 866.645991][T23677] netlink: 'syz.0.6390': attribute type 3 has an invalid length. [ 866.662692][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 866.670734][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 866.678421][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 866.696177][T23677] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6390'. [ 866.837986][T23672] delete_channel: no stack [ 866.915278][ T4657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.112748][ T4657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.149620][T23692] FAULT_INJECTION: forcing a failure. [ 867.149620][T23692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.191992][T23692] CPU: 0 PID: 23692 Comm: syz.3.6396 Not tainted syzkaller #0 [ 867.199591][T23692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.209778][T23692] Call Trace: [ 867.213068][T23692] [ 867.216004][T23692] dump_stack_lvl+0x188/0x24e [ 867.220703][T23692] ? show_regs_print_info+0x12/0x12 [ 867.225915][T23692] ? load_image+0x410/0x410 [ 867.230432][T23692] ? __lock_acquire+0x7c40/0x7c40 [ 867.235518][T23692] should_fail_ex+0x390/0x4c0 [ 867.240217][T23692] _copy_from_user+0x2c/0x170 [ 867.244892][T23692] ___sys_sendmsg+0x1c3/0x360 [ 867.249569][T23692] ? migrate_enable+0x148/0x220 [ 867.254423][T23692] ? __sys_sendmsg+0x2a0/0x2a0 [ 867.259302][T23692] __se_sys_sendmsg+0x1c3/0x2b0 [ 867.264156][T23692] ? __x64_sys_sendmsg+0x80/0x80 [ 867.269099][T23692] ? syscall_enter_from_user_mode+0x2a/0x80 [ 867.275025][T23692] do_syscall_64+0x4c/0xa0 [ 867.279444][T23692] ? clear_bhb_loop+0x60/0xb0 [ 867.284123][T23692] ? clear_bhb_loop+0x60/0xb0 [ 867.288882][T23692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.294773][T23692] RIP: 0033:0x7f6ecd79e0d9 [ 867.299180][T23692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.318788][T23692] RSP: 002b:00007f6ece5a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.327213][T23692] RAX: ffffffffffffffda RBX: 00007f6ecda25fa0 RCX: 00007f6ecd79e0d9 [ 867.335381][T23692] RDX: 0000000000008014 RSI: 0000200000000680 RDI: 0000000000000008 [ 867.343605][T23692] RBP: 00007f6ece5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 867.351590][T23692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.359555][T23692] R13: 00007f6ecda26038 R14: 00007f6ecda25fa0 R15: 00007ffe9c0a78e8 [ 867.367531][T23692] [ 868.732015][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 870.147444][T23695] netlink: 'syz.1.6397': attribute type 10 has an invalid length. [ 870.247959][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.254553][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.292730][T23703] netlink: 'syz.0.6399': attribute type 10 has an invalid length. [ 870.541733][T23676] chnl_net:caif_netlink_parms(): no params data found [ 870.707143][T23676] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.714500][T23676] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.741416][T23676] device bridge_slave_0 entered promiscuous mode [ 870.787686][ T4657] bond0: (slave netdevsim0): Releasing backup interface [ 870.802054][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 870.814176][ T4657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.846068][T23676] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.863043][T23676] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.880662][T23676] device bridge_slave_1 entered promiscuous mode [ 871.011389][T23676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.063768][T23676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.208605][T23676] team0: Port device team_slave_0 added [ 871.319632][T23676] team0: Port device team_slave_1 added [ 871.737025][T23676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.762205][T23676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.821951][T23676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.096010][T23676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.123006][T23676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.211085][T23676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.271381][T23749] netlink: 'syz.3.6410': attribute type 2 has an invalid length. [ 872.555780][T23676] device hsr_slave_0 entered promiscuous mode [ 872.587312][T23676] device hsr_slave_1 entered promiscuous mode [ 872.881926][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 873.001365][T23777] FAULT_INJECTION: forcing a failure. [ 873.001365][T23777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.038028][T23777] CPU: 1 PID: 23777 Comm: syz.4.6419 Not tainted syzkaller #0 [ 873.045728][T23777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 873.055798][T23777] Call Trace: [ 873.059264][T23777] [ 873.062193][T23777] dump_stack_lvl+0x188/0x24e [ 873.067178][T23777] ? show_regs_print_info+0x12/0x12 [ 873.072379][T23777] ? load_image+0x410/0x410 [ 873.076900][T23777] ? __lock_acquire+0x7c40/0x7c40 [ 873.081948][T23777] should_fail_ex+0x390/0x4c0 [ 873.086729][T23777] _copy_from_user+0x2c/0x170 [ 873.091669][T23777] iovec_from_user+0x143/0x360 [ 873.096530][T23777] __import_iovec+0x6c/0x510 [ 873.101167][T23777] import_iovec+0x6f/0xa0 [ 873.105503][T23777] ___sys_sendmsg+0x252/0x360 [ 873.110188][T23777] ? migrate_enable+0x148/0x220 [ 873.115045][T23777] ? __sys_sendmsg+0x2a0/0x2a0 [ 873.119837][T23777] __se_sys_sendmsg+0x1c3/0x2b0 [ 873.124785][T23777] ? __x64_sys_sendmsg+0x80/0x80 [ 873.129766][T23777] ? syscall_enter_from_user_mode+0x2a/0x80 [ 873.135657][T23777] do_syscall_64+0x4c/0xa0 [ 873.140157][T23777] ? clear_bhb_loop+0x60/0xb0 [ 873.144919][T23777] ? clear_bhb_loop+0x60/0xb0 [ 873.149593][T23777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.155485][T23777] RIP: 0033:0x7f167319e0d9 [ 873.159894][T23777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.179843][T23777] RSP: 002b:00007f1674056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.188426][T23777] RAX: ffffffffffffffda RBX: 00007f1673425fa0 RCX: 00007f167319e0d9 [ 873.196401][T23777] RDX: 0000000000008014 RSI: 0000200000000680 RDI: 0000000000000008 [ 873.204390][T23777] RBP: 00007f1674056090 R08: 0000000000000000 R09: 0000000000000000 [ 873.212356][T23777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.220324][T23777] R13: 00007f1673426038 R14: 00007f1673425fa0 R15: 00007ffdfb70c138 [ 873.228303][T23777] [ 873.424252][T23779] netlink: 'syz.0.6420': attribute type 10 has an invalid length. [ 873.517580][T23788] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6421'. [ 873.748063][T23788] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 873.916776][T23793] netlink: 'syz.4.6422': attribute type 10 has an invalid length. [ 874.561141][ T4657] device hsr_slave_0 left promiscuous mode [ 874.588820][ T4657] device hsr_slave_1 left promiscuous mode [ 874.613777][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.630491][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.679698][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.694397][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.774485][ T4657] bridge0: port 2(hsr0) entered disabled state [ 874.795006][ T4657] device bridge_slave_0 left promiscuous mode [ 874.834435][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.890272][ T4657] device veth1_macvtap left promiscuous mode [ 874.897203][ T4657] device veth1_vlan left promiscuous mode [ 874.904603][ T4657] device veth0_vlan left promiscuous mode [ 874.962035][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 875.554100][ T4657] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 875.650748][T23836] netlink: 'syz.4.6432': attribute type 3 has an invalid length. [ 875.671816][T23836] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6432'. [ 876.210929][ T4657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.286075][ T4657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.359141][ T4657] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 876.561559][ T4657] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 876.570760][ T4657] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 876.582318][ T4657] bond0 (unregistering): Released all slaves [ 876.824748][T23676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 876.891256][T23676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 876.928035][T23676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 876.958394][T23858] FAULT_INJECTION: forcing a failure. [ 876.958394][T23858] name failslab, interval 1, probability 0, space 0, times 0 [ 876.973987][T23858] CPU: 0 PID: 23858 Comm: syz.0.6440 Not tainted syzkaller #0 [ 876.981490][T23858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.991569][T23858] Call Trace: [ 876.994931][T23858] [ 876.997876][T23858] dump_stack_lvl+0x188/0x24e [ 877.002703][T23858] ? show_regs_print_info+0x12/0x12 [ 877.007980][T23858] ? load_image+0x410/0x410 [ 877.012520][T23858] ? __might_sleep+0xd0/0xd0 [ 877.017128][T23858] ? __lock_acquire+0x7c40/0x7c40 [ 877.022186][T23858] should_fail_ex+0x390/0x4c0 [ 877.026983][T23858] should_failslab+0x5/0x20 [ 877.031503][T23858] slab_pre_alloc_hook+0x59/0x300 [ 877.036579][T23858] kmem_cache_alloc_node+0x5a/0x310 [ 877.041828][T23858] ? __alloc_skb+0xf9/0x7d0 [ 877.046356][T23858] __alloc_skb+0xf9/0x7d0 [ 877.050719][T23858] netlink_sendmsg+0x654/0xbd0 [ 877.055522][T23858] ? netlink_getsockopt+0x550/0x550 [ 877.060761][T23858] ? netlink_getsockopt+0x550/0x550 [ 877.065982][T23858] ____sys_sendmsg+0x5ed/0x9a0 [ 877.070764][T23858] ? __sys_sendmsg_sock+0x30/0x30 [ 877.075798][T23858] ? __import_iovec+0x306/0x510 [ 877.080755][T23858] ? import_iovec+0x6f/0xa0 [ 877.085264][T23858] ___sys_sendmsg+0x2a2/0x360 [ 877.089949][T23858] ? __sys_sendmsg+0x2a0/0x2a0 [ 877.094752][T23858] ? ktime_get+0x7b/0x270 [ 877.099165][T23858] ? trace_call_bpf+0xbf/0x6b0 [ 877.103942][T23858] __se_sys_sendmsg+0x1c3/0x2b0 [ 877.108846][T23858] ? perf_trace_preemptirq_template+0x268/0x320 [ 877.115084][T23858] ? __x64_sys_sendmsg+0x80/0x80 [ 877.120046][T23858] ? lockdep_hardirqs_on+0x94/0x140 [ 877.125262][T23858] do_syscall_64+0x4c/0xa0 [ 877.129887][T23858] ? clear_bhb_loop+0x60/0xb0 [ 877.134564][T23858] ? clear_bhb_loop+0x60/0xb0 [ 877.139235][T23858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.145124][T23858] RIP: 0033:0x7f1c7b39e0d9 [ 877.149557][T23858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.169164][T23858] RSP: 002b:00007f1c7c294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.177608][T23858] RAX: ffffffffffffffda RBX: 00007f1c7b625fa0 RCX: 00007f1c7b39e0d9 [ 877.185577][T23858] RDX: 0000000000008014 RSI: 0000200000000680 RDI: 0000000000000008 [ 877.193550][T23858] RBP: 00007f1c7c294090 R08: 0000000000000000 R09: 0000000000000000 [ 877.201692][T23858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.209828][T23858] R13: 00007f1c7b626038 R14: 00007f1c7b625fa0 R15: 00007ffcce07e3f8 [ 877.218150][T23858] [ 877.261315][T23859] netlink: 'syz.3.6439': attribute type 2 has an invalid length. [ 877.315128][T23859] netlink: 'syz.3.6439': attribute type 8 has an invalid length. [ 877.338847][T23859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6439'. [ 877.401945][T23676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 877.434517][T23865] netlink: 'syz.1.6441': attribute type 10 has an invalid length. [ 878.445185][T23879] netlink: 'syz.1.6446': attribute type 10 has an invalid length. [ 878.493522][T23676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.547059][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 878.563865][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 878.585490][T23676] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.631002][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 878.640680][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 878.667242][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.674454][ T4647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.707278][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 878.726540][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 878.748281][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.755528][ T4647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.799212][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 878.828722][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 878.845206][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 878.862887][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 878.939007][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 878.999373][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 879.050115][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.085284][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.160525][T23676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 879.181914][T23676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.194862][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.227917][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.241175][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.360930][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 879.402412][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 880.216622][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 880.231048][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 880.263839][T23676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.315953][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 880.365792][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 880.441580][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 880.463284][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 880.518459][T23676] device veth0_vlan entered promiscuous mode [ 880.539653][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 880.568098][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 880.603379][T23676] device veth1_vlan entered promiscuous mode [ 880.720517][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 880.742284][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 880.792351][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 880.801060][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 880.848004][T23676] device veth0_macvtap entered promiscuous mode [ 880.884707][T23676] device veth1_macvtap entered promiscuous mode [ 880.983317][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.028270][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.051447][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.081815][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.101948][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.121924][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.146420][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.182006][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.204022][T23676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.222128][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 881.230961][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 881.313294][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 881.342844][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 881.367759][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.420474][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.451097][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.484057][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.501894][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.531933][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.551831][T23676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.571793][T23676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.603549][T23676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.621431][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 881.650374][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 881.685411][T23676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.732004][T23676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.740768][T23676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.772242][T23676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.952868][ T4657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.960725][ T4657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.027277][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 882.060263][ T4661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.090905][ T4661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.126617][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 882.622679][T23996] FAULT_INJECTION: forcing a failure. [ 882.622679][T23996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.668570][T23996] CPU: 1 PID: 23996 Comm: syz.1.6485 Not tainted syzkaller #0 [ 882.676197][T23996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.686408][T23996] Call Trace: [ 882.689704][T23996] [ 882.692741][T23996] dump_stack_lvl+0x188/0x24e [ 882.697449][T23996] ? show_regs_print_info+0x12/0x12 [ 882.702679][T23996] ? load_image+0x410/0x410 [ 882.707214][T23996] ? __might_fault+0xa6/0x120 [ 882.711922][T23996] should_fail_ex+0x390/0x4c0 [ 882.716630][T23996] copyin+0x1b/0x120 [ 882.720640][T23996] _copy_from_iter+0x447/0x1130 [ 882.725530][T23996] ? copyout_mc+0x110/0x110 [ 882.730063][T23996] ? __phys_addr_symbol+0x2b/0x70 [ 882.735110][T23996] ? __check_object_size+0x4f6/0xa70 [ 882.740419][T23996] netlink_sendmsg+0x755/0xbd0 [ 882.745226][T23996] ? netlink_getsockopt+0x550/0x550 [ 882.750466][T23996] ? apparmor_socket_sendmsg+0x8a/0x330 [ 882.756127][T23996] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 882.761613][T23996] ? security_socket_sendmsg+0x7c/0xa0 [ 882.767100][T23996] ? netlink_getsockopt+0x550/0x550 [ 882.772402][T23996] ____sys_sendmsg+0x5ed/0x9a0 [ 882.777196][T23996] ? __sys_sendmsg_sock+0x30/0x30 [ 882.782235][T23996] ? __import_iovec+0x306/0x510 [ 882.787111][T23996] ? import_iovec+0x6f/0xa0 [ 882.791631][T23996] ___sys_sendmsg+0x2a2/0x360 [ 882.796343][T23996] ? __sys_sendmsg+0x2a0/0x2a0 [ 882.801142][T23996] ? ktime_get+0x7b/0x270 [ 882.805513][T23996] __se_sys_sendmsg+0x1c3/0x2b0 [ 882.810467][T23996] ? perf_trace_preemptirq_template+0x268/0x320 [ 882.816729][T23996] ? __x64_sys_sendmsg+0x80/0x80 [ 882.821723][T23996] ? lockdep_hardirqs_on+0x94/0x140 [ 882.826938][T23996] do_syscall_64+0x4c/0xa0 [ 882.831382][T23996] ? clear_bhb_loop+0x60/0xb0 [ 882.836088][T23996] ? clear_bhb_loop+0x60/0xb0 [ 882.840775][T23996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.846676][T23996] RIP: 0033:0x7f724719e0d9 [ 882.851186][T23996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.871153][T23996] RSP: 002b:00007f7247fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.879578][T23996] RAX: ffffffffffffffda RBX: 00007f7247425fa0 RCX: 00007f724719e0d9 [ 882.887582][T23996] RDX: 0000000000008014 RSI: 0000200000000680 RDI: 0000000000000008 [ 882.895568][T23996] RBP: 00007f7247fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 882.903850][T23996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.911912][T23996] R13: 00007f7247426038 R14: 00007f7247425fa0 R15: 00007fff465c8b08 [ 882.919902][T23996] [ 883.347127][T24011] netlink: 'syz.2.6490': attribute type 10 has an invalid length. [ 883.522927][T24011] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 884.420555][T24050] FAULT_INJECTION: forcing a failure. [ 884.420555][T24050] name failslab, interval 1, probability 0, space 0, times 0 [ 884.459993][T24050] CPU: 0 PID: 24050 Comm: syz.2.6505 Not tainted syzkaller #0 [ 884.467529][T24050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.477608][T24050] Call Trace: [ 884.480901][T24050] [ 884.483855][T24050] dump_stack_lvl+0x188/0x24e [ 884.488557][T24050] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.494747][T24050] ? show_regs_print_info+0x12/0x12 [ 884.500056][T24050] ? load_image+0x410/0x410 [ 884.504589][T24050] ? ref_tracker_alloc+0x8e/0x490 [ 884.509641][T24050] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 884.515169][T24050] should_fail_ex+0x390/0x4c0 [ 884.519869][T24050] should_failslab+0x5/0x20 [ 884.524367][T24050] slab_pre_alloc_hook+0x59/0x300 [ 884.529391][T24050] kmem_cache_alloc+0x56/0x2f0 [ 884.534157][T24050] ? skb_clone+0x1e7/0x370 [ 884.538576][T24050] skb_clone+0x1e7/0x370 [ 884.542817][T24050] __netlink_deliver_tap+0x3e4/0x7e0 [ 884.548117][T24050] ? netlink_deliver_tap+0x2e/0x1b0 [ 884.553339][T24050] netlink_deliver_tap+0x19c/0x1b0 [ 884.558622][T24050] netlink_unicast+0x777/0x920 [ 884.563389][T24050] netlink_sendmsg+0x8ad/0xbd0 [ 884.568327][T24050] ? netlink_getsockopt+0x550/0x550 [ 884.573523][T24050] ? apparmor_socket_sendmsg+0x8a/0x330 [ 884.579062][T24050] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 884.584348][T24050] ? security_socket_sendmsg+0x7c/0xa0 [ 884.589799][T24050] ? netlink_getsockopt+0x550/0x550 [ 884.594998][T24050] ____sys_sendmsg+0x5ed/0x9a0 [ 884.599765][T24050] ? __sys_sendmsg_sock+0x30/0x30 [ 884.604780][T24050] ? __import_iovec+0x306/0x510 [ 884.609652][T24050] ? import_iovec+0x6f/0xa0 [ 884.614167][T24050] ___sys_sendmsg+0x2a2/0x360 [ 884.618853][T24050] ? __sys_sendmsg+0x2a0/0x2a0 [ 884.623630][T24050] ? ktime_get+0x7b/0x270 [ 884.627975][T24050] ? trace_call_bpf+0xbf/0x6b0 [ 884.632756][T24050] __se_sys_sendmsg+0x1c3/0x2b0 [ 884.637661][T24050] ? ct_nmi_exit+0x145/0x1c0 [ 884.642256][T24050] ? __x64_sys_sendmsg+0x80/0x80 [ 884.647218][T24050] ? lockdep_hardirqs_on+0x94/0x140 [ 884.652424][T24050] do_syscall_64+0x4c/0xa0 [ 884.656858][T24050] ? clear_bhb_loop+0x60/0xb0 [ 884.661547][T24050] ? clear_bhb_loop+0x60/0xb0 [ 884.666232][T24050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.672131][T24050] RIP: 0033:0x7fa84e19e0d9 [ 884.676568][T24050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.696477][T24050] RSP: 002b:00007fa84f045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.704891][T24050] RAX: ffffffffffffffda RBX: 00007fa84e425fa0 RCX: 00007fa84e19e0d9 [ 884.712858][T24050] RDX: 0000000000008014 RSI: 0000200000000680 RDI: 0000000000000008 [ 884.720823][T24050] RBP: 00007fa84f045090 R08: 0000000000000000 R09: 0000000000000000 [ 884.728786][T24050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.736754][T24050] R13: 00007fa84e426038 R14: 00007fa84e425fa0 R15: 00007ffe0765bd88 [ 884.744764][T24050] [ 884.785205][T24050] netlink: 'syz.2.6505': attribute type 10 has an invalid length. [ 885.266937][T24074] netlink: 'syz.4.6513': attribute type 10 has an invalid length. [ 885.331787][T24075] tipc: Started in network mode [ 885.359131][T24075] tipc: Node identity 9215a268, cluster identity 4711 [ 885.402692][T24075] tipc: Node number set to 2450891368 [ 885.443669][T24078] netlink: 'syz.1.6512': attribute type 2 has an invalid length. [ 885.522208][T24078] netlink: 'syz.1.6512': attribute type 8 has an invalid length. [ 885.598473][T24078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6512'. [ 886.015028][T24091] netlink: 'syz.4.6518': attribute type 3 has an invalid length. [ 886.036704][T24091] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6518'. [ 886.738113][T24115] FAULT_INJECTION: forcing a failure. [ 886.738113][T24115] name failslab, interval 1, probability 0, space 0, times 0 [ 886.765140][T24115] CPU: 1 PID: 24115 Comm: syz.4.6528 Not tainted syzkaller #0 [ 886.772740][T24115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.782897][T24115] Call Trace: [ 886.787328][T24115] [ 886.790283][T24115] dump_stack_lvl+0x188/0x24e [ 886.795003][T24115] ? show_regs_print_info+0x12/0x12 [ 886.800401][T24115] ? load_image+0x410/0x410 [ 886.804921][T24115] ? __might_sleep+0xd0/0xd0 [ 886.809595][T24115] ? __lock_acquire+0x7c40/0x7c40 [ 886.814615][T24115] ? migrate_enable+0x148/0x220 [ 886.819463][T24115] should_fail_ex+0x390/0x4c0 [ 886.824139][T24115] should_failslab+0x5/0x20 [ 886.828911][T24115] slab_pre_alloc_hook+0x59/0x300 [ 886.833957][T24115] ? rtnl_newlink+0x10f/0x1f90 [ 886.838761][T24115] __kmem_cache_alloc_node+0x4f/0x270 [ 886.844137][T24115] ? mark_lock+0x94/0x320 [ 886.848495][T24115] ? rtnl_newlink+0x10f/0x1f90 [ 886.853285][T24115] kmalloc_trace+0x26/0xe0 [ 886.857708][T24115] rtnl_newlink+0x10f/0x1f90 [ 886.862319][T24115] ? __mutex_trylock_common+0x15c/0x260 [ 886.867863][T24115] ? rtnl_setlink+0x510/0x510 [ 886.872537][T24115] ? trace_raw_output_contention_end+0xd0/0xd0 [ 886.878687][T24115] ? rcu_is_watching+0x11/0xa0 [ 886.883483][T24115] ? trace_contention_end+0x5f/0x170 [ 886.888860][T24115] ? __mutex_lock+0x1ab/0xae0 [ 886.893558][T24115] ? rtnetlink_rcv_msg+0x80d/0xfb0 [ 886.898661][T24115] ? rcu_read_unlock+0x8c/0xa0 [ 886.903424][T24115] ? mutex_lock_nested+0x10/0x10 [ 886.908367][T24115] ? rtnl_setlink+0x510/0x510 [ 886.913049][T24115] rtnetlink_rcv_msg+0x863/0xfb0 [ 886.918072][T24115] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 886.923202][T24115] ? rtnetlink_bind+0x80/0x80 [ 886.927898][T24115] ? __local_bh_enable_ip+0x136/0x1c0 [ 886.933288][T24115] ? lockdep_hardirqs_on+0x94/0x140 [ 886.938479][T24115] ? __local_bh_enable_ip+0x136/0x1c0 [ 886.943843][T24115] ? _local_bh_enable+0xa0/0xa0 [ 886.948695][T24115] ? __dev_queue_xmit+0x281/0x3810 [ 886.953822][T24115] ? __dev_queue_xmit+0x281/0x3810 [ 886.958958][T24115] ? __dev_queue_xmit+0x1d84/0x3810 [ 886.964185][T24115] ? __dev_queue_xmit+0x281/0x3810 [ 886.969318][T24115] ? ref_tracker_free+0x682/0x830 [ 886.974368][T24115] ? refcount_inc+0x70/0x70 [ 886.978891][T24115] ? memcpy+0x3c/0x60 [ 886.982878][T24115] ? __copy_skb_header+0x3ba/0x4f0 [ 886.987996][T24115] ? __skb_clone+0x446/0x6c0 [ 886.992681][T24115] netlink_rcv_skb+0x1ef/0x440 [ 886.998063][T24115] ? rtnetlink_bind+0x80/0x80 [ 887.002744][T24115] ? netlink_ack+0x1160/0x1160 [ 887.007520][T24115] ? netlink_deliver_tap+0x2e/0x1b0 [ 887.012722][T24115] netlink_unicast+0x7ad/0x920 [ 887.017491][T24115] netlink_sendmsg+0x8ad/0xbd0 [ 887.022256][T24115] ? netlink_getsockopt+0x550/0x550 [ 887.027452][T24115] ? apparmor_socket_sendmsg+0x8a/0x330 [ 887.032995][T24115] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 887.038272][T24115] ? security_socket_sendmsg+0x7c/0xa0 [ 887.043725][T24115] ? netlink_getsockopt+0x550/0x550 [ 887.048923][T24115] ____sys_sendmsg+0x5ed/0x9a0 [ 887.053691][T24115] ? __sys_sendmsg_sock+0x30/0x30 [ 887.058709][T24115] ? __import_iovec+0x306/0x510 [ 887.063561][T24115] ? import_iovec+0x6f/0xa0 [ 887.068060][T24115] ___sys_sendmsg+0x2a2/0x360 [ 887.072993][T24115] ? migrate_enable+0x148/0x220 [ 887.077841][T24115] ? __sys_sendmsg+0x2a0/0x2a0 [ 887.082631][T24115] __se_sys_sendmsg+0x1c3/0x2b0 [ 887.087759][T24115] ? __x64_sys_sendmsg+0x80/0x80 [ 887.092808][T24115] ? syscall_enter_from_user_mode+0x2a/0x80 [ 887.098748][T24115] do_syscall_64+0x4c/0xa0 [ 887.103174][T24115] ? clear_bhb_loop+0x60/0xb0 [ 887.107859][T24115] ? clear_bhb_loop+0x60/0xb0 [ 887.112536][T24115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.118508][T24115] RIP: 0033:0x7f167319e0d9 [ 887.122920][T24115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.142605][T24115] RSP: 002b:00007f1674056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.151013][T24115] RAX: ffffffffffffffda RBX: 00007f1673425fa0 RCX: 00007f167319e0d9 [ 887.159064][T24115] RDX: 0000000000008014 RSI: 0000200000000680 RDI: 0000000000000008 [ 887.167128][T24115] RBP: 00007f1674056090 R08: 0000000000000000 R09: 0000000000000000 [ 887.175176][T24115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.183137][T24115] R13: 00007f1673426038 R14: 00007f1673425fa0 R15: 00007ffdfb70c138 [ 887.191116][T24115] [ 887.421408][T24128] netlink: 'syz.3.6532': attribute type 10 has an invalid length. [ 887.762316][T24144] netlink: 'syz.4.6538': attribute type 12 has an invalid length. [ 887.771396][T24144] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6538'. [ 888.926134][T24165] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6546'. [ 889.123114][T24165] netlink: 'syz.2.6546': attribute type 9 has an invalid length. [ 889.155964][T24165] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6546'. [ 889.801017][T24185] netlink: 'syz.3.6553': attribute type 10 has an invalid length. [ 890.243968][T24193] netlink: 'syz.0.6556': attribute type 10 has an invalid length. [ 890.293857][T24193] FAULT_INJECTION: forcing a failure. [ 890.293857][T24193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.363760][T24193] CPU: 0 PID: 24193 Comm: syz.0.6556 Not tainted syzkaller #0 [ 890.371281][T24193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 890.381359][T24193] Call Trace: [ 890.384819][T24193] [ 890.387813][T24193] dump_stack_lvl+0x188/0x24e [ 890.392544][T24193] ? show_regs_print_info+0x12/0x12 [ 890.397775][T24193] ? load_image+0x410/0x410 [ 890.402311][T24193] ? __lock_acquire+0x7c40/0x7c40 [ 890.407402][T24193] ? snprintf+0xe5/0x140 [ 890.411674][T24193] should_fail_ex+0x390/0x4c0 [ 890.416378][T24193] _copy_to_user+0x2c/0x130 [ 890.420982][T24193] simple_read_from_buffer+0xe3/0x150 [ 890.426366][T24193] proc_fail_nth_read+0x1a6/0x220 [ 890.431399][T24193] ? proc_fault_inject_write+0x310/0x310 [ 890.437086][T24193] ? fsnotify_perm+0x248/0x550 [ 890.441859][T24193] ? proc_fault_inject_write+0x310/0x310 [ 890.447604][T24193] vfs_read+0x2db/0x960 [ 890.451792][T24193] ? kernel_read+0x1e0/0x1e0 [ 890.456400][T24193] ? __fget_files+0x28/0x460 [ 890.460998][T24193] ? __fget_files+0x3fc/0x460 [ 890.465689][T24193] ? __fdget_pos+0x2ae/0x360 [ 890.470366][T24193] ? ksys_read+0x70/0x260 [ 890.474700][T24193] ksys_read+0x14d/0x260 [ 890.478949][T24193] ? vfs_write+0x9a0/0x9a0 [ 890.483370][T24193] ? syscall_enter_from_user_mode+0x2a/0x80 [ 890.489256][T24193] do_syscall_64+0x4c/0xa0 [ 890.493681][T24193] ? clear_bhb_loop+0x60/0xb0 [ 890.498353][T24193] ? clear_bhb_loop+0x60/0xb0 [ 890.503026][T24193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 890.508929][T24193] RIP: 0033:0x7f1c7b35e90e [ 890.513338][T24193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 890.532937][T24193] RSP: 002b:00007f1c7c293fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 890.541515][T24193] RAX: ffffffffffffffda RBX: 00007f1c7c2946c0 RCX: 00007f1c7b35e90e [ 890.549682][T24193] RDX: 000000000000000f RSI: 00007f1c7c2940a0 RDI: 0000000000000009 [ 890.557834][T24193] RBP: 00007f1c7c294090 R08: 0000000000000000 R09: 0000000000000000 [ 890.565808][T24193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.573798][T24193] R13: 00007f1c7b626038 R14: 00007f1c7b625fa0 R15: 00007ffcce07e3f8 [ 890.581787][T24193] [ 890.703704][T24203] netlink: 'syz.3.6558': attribute type 10 has an invalid length. [ 890.959216][T24203] team0: Port device geneve1 added [ 891.021042][T24208] netlink: 'syz.1.6561': attribute type 12 has an invalid length. [ 891.191419][T24213] netlink: 'syz.2.6564': attribute type 9 has an invalid length. [ 891.220211][T24213] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.6564'. [ 891.748177][T24230] FAULT_INJECTION: forcing a failure. [ 891.748177][T24230] name failslab, interval 1, probability 0, space 0, times 0 [ 891.841397][T24230] CPU: 1 PID: 24230 Comm: syz.1.6571 Not tainted syzkaller #0 [ 891.848942][T24230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 891.859021][T24230] Call Trace: [ 891.862309][T24230] [ 891.865344][T24230] dump_stack_lvl+0x188/0x24e [ 891.870089][T24230] ? show_regs_print_info+0x12/0x12 [ 891.875323][T24230] ? load_image+0x410/0x410 [ 891.879987][T24230] ? __might_sleep+0xd0/0xd0 [ 891.884864][T24230] ? __lock_acquire+0x7c40/0x7c40 [ 891.889935][T24230] should_fail_ex+0x390/0x4c0 [ 891.894642][T24230] should_failslab+0x5/0x20 [ 891.899260][T24230] slab_pre_alloc_hook+0x59/0x300 [ 891.904407][T24230] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 891.911550][T24230] __kmem_cache_alloc_node+0x4f/0x270 [ 891.916933][T24230] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 891.922789][T24230] __kmalloc+0xa3/0x240 [ 891.926966][T24230] tomoyo_realpath_from_path+0xe2/0x5c0 [ 891.932516][T24230] ? tomoyo_domain+0xd2/0x120 [ 891.937197][T24230] ? tomoyo_path_number_perm+0x205/0x650 [ 891.942828][T24230] tomoyo_path_number_perm+0x22f/0x650 [ 891.948280][T24230] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 891.954863][T24230] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 891.960314][T24230] ? ksys_write+0x1ce/0x260 [ 891.964846][T24230] ? __fget_files+0x28/0x460 [ 891.969446][T24230] security_file_ioctl+0x6c/0xa0 [ 891.974387][T24230] __se_sys_ioctl+0x48/0x170 [ 891.979070][T24230] do_syscall_64+0x4c/0xa0 [ 891.983484][T24230] ? clear_bhb_loop+0x60/0xb0 [ 891.988158][T24230] ? clear_bhb_loop+0x60/0xb0 [ 891.992836][T24230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.998813][T24230] RIP: 0033:0x7f724719e0d9 [ 892.003224][T24230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.022860][T24230] RSP: 002b:00007f7247fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.031277][T24230] RAX: ffffffffffffffda RBX: 00007f7247425fa0 RCX: 00007f724719e0d9 [ 892.039872][T24230] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000007 [ 892.047865][T24230] RBP: 00007f7247fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 892.055891][T24230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.063866][T24230] R13: 00007f7247426038 R14: 00007f7247425fa0 R15: 00007fff465c8b08 [ 892.072122][T24230] [ 892.165691][T24230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.917759][T24255] netlink: 'syz.1.6578': attribute type 10 has an invalid length. [ 893.094394][T24258] netlink: 'syz.2.6579': attribute type 12 has an invalid length. [ 893.952309][T24288] netlink: 'syz.2.6590': attribute type 10 has an invalid length. [ 894.209690][T24288] team0: Port device geneve1 added [ 894.849507][T24310] FAULT_INJECTION: forcing a failure. [ 894.849507][T24310] name failslab, interval 1, probability 0, space 0, times 0 [ 894.922115][T24310] CPU: 1 PID: 24310 Comm: syz.3.6599 Not tainted syzkaller #0 [ 894.929642][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 894.939717][T24310] Call Trace: [ 894.942992][T24310] [ 894.945922][T24310] dump_stack_lvl+0x188/0x24e [ 894.950606][T24310] ? show_regs_print_info+0x12/0x12 [ 894.955910][T24310] ? load_image+0x410/0x410 [ 894.960419][T24310] ? __might_sleep+0xd0/0xd0 [ 894.965027][T24310] ? __lock_acquire+0x7c40/0x7c40 [ 894.970064][T24310] should_fail_ex+0x390/0x4c0 [ 894.974853][T24310] should_failslab+0x5/0x20 [ 894.979399][T24310] slab_pre_alloc_hook+0x59/0x300 [ 894.984446][T24310] ? tomoyo_encode+0x28a/0x550 [ 894.989218][T24310] __kmem_cache_alloc_node+0x4f/0x270 [ 894.994608][T24310] ? tomoyo_encode+0x28a/0x550 [ 894.999399][T24310] __kmalloc+0xa3/0x240 [ 895.003580][T24310] tomoyo_encode+0x28a/0x550 [ 895.008173][T24310] tomoyo_realpath_from_path+0x578/0x5c0 [ 895.013804][T24310] ? tomoyo_domain+0xd2/0x120 [ 895.018496][T24310] ? tomoyo_path_number_perm+0x205/0x650 [ 895.024229][T24310] tomoyo_path_number_perm+0x22f/0x650 [ 895.029785][T24310] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 895.036384][T24310] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 895.041842][T24310] ? hrtimer_interrupt+0x557/0x980 [ 895.046963][T24310] ? ktime_get+0x7b/0x270 [ 895.051413][T24310] ? __fget_files+0x28/0x460 [ 895.056015][T24310] security_file_ioctl+0x6c/0xa0 [ 895.060951][T24310] __se_sys_ioctl+0x48/0x170 [ 895.065551][T24310] do_syscall_64+0x4c/0xa0 [ 895.069967][T24310] ? clear_bhb_loop+0x60/0xb0 [ 895.074643][T24310] ? clear_bhb_loop+0x60/0xb0 [ 895.079323][T24310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.085387][T24310] RIP: 0033:0x7f6ecd79e0d9 [ 895.089806][T24310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.109555][T24310] RSP: 002b:00007f6ece5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 895.117972][T24310] RAX: ffffffffffffffda RBX: 00007f6ecda25fa0 RCX: 00007f6ecd79e0d9 [ 895.125940][T24310] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000007 [ 895.133907][T24310] RBP: 00007f6ece5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 895.141890][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.150013][T24310] R13: 00007f6ecda26038 R14: 00007f6ecda25fa0 R15: 00007ffe9c0a78e8 [ 895.158172][T24310] [ 895.174569][T24310] ERROR: Out of memory at tomoyo_realpath_from_path. [ 895.371119][T24323] netlink: 'syz.4.6601': attribute type 12 has an invalid length. [ 895.690832][T24326] netlink: 'syz.3.6602': attribute type 9 has an invalid length. [ 895.741117][T24326] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6602'. [ 895.979952][T24335] netlink: 'syz.4.6605': attribute type 10 has an invalid length. [ 896.307478][T24345] netlink: 'syz.4.6609': attribute type 10 has an invalid length. [ 896.448496][T24345] team0: Port device geneve1 added [ 897.014797][T24365] netlink: 'syz.3.6617': attribute type 12 has an invalid length. [ 898.278368][T24395] netlink: 'syz.0.6626': attribute type 10 has an invalid length. [ 898.336246][T24392] FAULT_INJECTION: forcing a failure. [ 898.336246][T24392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.410378][T24392] CPU: 0 PID: 24392 Comm: syz.3.6628 Not tainted syzkaller #0 [ 898.417904][T24392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.427985][T24392] Call Trace: [ 898.431290][T24392] [ 898.434241][T24392] dump_stack_lvl+0x188/0x24e [ 898.439226][T24392] ? show_regs_print_info+0x12/0x12 [ 898.444480][T24392] ? load_image+0x410/0x410 [ 898.449009][T24392] ? __lock_acquire+0x7c40/0x7c40 [ 898.454061][T24392] ? tomoyo_path_number_perm+0x205/0x650 [ 898.459724][T24392] should_fail_ex+0x390/0x4c0 [ 898.464540][T24392] _copy_from_user+0x2c/0x170 [ 898.469599][T24392] dev_ifconf+0xd8/0x300 [ 898.473960][T24392] ? sock_diag_rcv_msg+0x5e0/0x5e0 [ 898.479106][T24392] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 898.485128][T24392] ? lock_chain_count+0x20/0x20 [ 898.490016][T24392] sock_ioctl+0x286/0x700 [ 898.494386][T24392] ? sock_poll+0x420/0x420 [ 898.498870][T24392] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 898.505049][T24392] ? sock_poll+0x420/0x420 [ 898.509559][T24392] ? __se_sys_ioctl+0xee/0x170 [ 898.514350][T24392] ? sock_poll+0x420/0x420 [ 898.518771][T24392] __se_sys_ioctl+0xfa/0x170 [ 898.523363][T24392] do_syscall_64+0x4c/0xa0 [ 898.527796][T24392] ? clear_bhb_loop+0x60/0xb0 [ 898.532580][T24392] ? clear_bhb_loop+0x60/0xb0 [ 898.537282][T24392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.543187][T24392] RIP: 0033:0x7f6ecd79e0d9 [ 898.547622][T24392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.567319][T24392] RSP: 002b:00007f6ece5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.575744][T24392] RAX: ffffffffffffffda RBX: 00007f6ecda25fa0 RCX: 00007f6ecd79e0d9 [ 898.583728][T24392] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000007 [ 898.591699][T24392] RBP: 00007f6ece5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 898.599847][T24392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.607821][T24392] R13: 00007f6ecda26038 R14: 00007f6ecda25fa0 R15: 00007ffe9c0a78e8 [ 898.615803][T24392] [ 898.672321][T24395] team0: Port device geneve1 added [ 899.021027][T24405] device bridge_slave_1 left promiscuous mode [ 899.040051][T24405] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.065588][T24405] device bridge_slave_0 left promiscuous mode [ 899.086136][T24405] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.393771][T24407] netlink: 'syz.3.6635': attribute type 10 has an invalid length. [ 899.419631][T24409] netlink: 'syz.0.6632': attribute type 12 has an invalid length. [ 899.888998][T24433] device bridge_slave_1 left promiscuous mode [ 899.917159][T24433] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.999229][T24433] device bridge_slave_0 left promiscuous mode [ 900.038657][T24433] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.267697][T24435] netlink: 'syz.1.6641': attribute type 10 has an invalid length. [ 900.330943][T24448] netlink: 'syz.4.6645': attribute type 1 has an invalid length. [ 900.352269][T24448] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6645'. [ 900.359799][T24435] team0: Port device geneve1 added [ 900.413593][T24449] validate_nla: 1 callbacks suppressed [ 900.413612][T24449] netlink: 'syz.4.6645': attribute type 29 has an invalid length. [ 900.438893][T24448] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6645'. [ 900.679472][T24458] netlink: 'syz.4.6648': attribute type 2 has an invalid length. [ 900.688153][T24457] netlink: 'syz.4.6648': attribute type 2 has an invalid length. [ 900.768342][T24458] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.6648'. [ 900.772144][T24457] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.6648'. [ 901.210113][T24472] FAULT_INJECTION: forcing a failure. [ 901.210113][T24472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.239926][T24472] CPU: 1 PID: 24472 Comm: syz.1.6656 Not tainted syzkaller #0 [ 901.247497][T24472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.257570][T24472] Call Trace: [ 901.260866][T24472] [ 901.263815][T24472] dump_stack_lvl+0x188/0x24e [ 901.268526][T24472] ? show_regs_print_info+0x12/0x12 [ 901.273758][T24472] ? load_image+0x410/0x410 [ 901.278301][T24472] ? __lock_acquire+0x7c40/0x7c40 [ 901.283344][T24472] ? tomoyo_path_number_perm+0x5a4/0x650 [ 901.288987][T24472] ? tomoyo_path_number_perm+0x205/0x650 [ 901.294636][T24472] should_fail_ex+0x390/0x4c0 [ 901.299337][T24472] _copy_from_user+0x2c/0x170 [ 901.304037][T24472] dev_ifconf+0xd8/0x300 [ 901.308298][T24472] ? sock_diag_rcv_msg+0x5e0/0x5e0 [ 901.313452][T24472] sock_ioctl+0x286/0x700 [ 901.317797][T24472] ? sock_poll+0x420/0x420 [ 901.322212][T24472] ? bpf_lsm_file_ioctl+0x5/0x10 [ 901.327173][T24472] ? security_file_ioctl+0x7c/0xa0 [ 901.332289][T24472] ? sock_poll+0x420/0x420 [ 901.336701][T24472] __se_sys_ioctl+0xfa/0x170 [ 901.341315][T24472] do_syscall_64+0x4c/0xa0 [ 901.345763][T24472] ? clear_bhb_loop+0x60/0xb0 [ 901.350438][T24472] ? clear_bhb_loop+0x60/0xb0 [ 901.355131][T24472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.361019][T24472] RIP: 0033:0x7f724719e0d9 [ 901.365956][T24472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.385670][T24472] RSP: 002b:00007f7247fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 901.394104][T24472] RAX: ffffffffffffffda RBX: 00007f7247425fa0 RCX: 00007f724719e0d9 [ 901.402071][T24472] RDX: 0000200000000080 RSI: 0000000000008912 RDI: 0000000000000007 [ 901.410043][T24472] RBP: 00007f7247fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 901.418066][T24472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.426029][T24472] R13: 00007f7247426038 R14: 00007f7247425fa0 R15: 00007fff465c8b08 [ 901.434178][T24472] [ 901.719446][T24488] device bridge_slave_1 left promiscuous mode [ 901.726853][T24488] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.749800][T24488] device bridge_slave_0 left promiscuous mode [ 901.763512][T24488] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.256071][T24502] netlink: 'syz.1.6665': attribute type 10 has an invalid length. [ 902.413936][T24504] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.6666'. [ 903.398015][T24530] netlink: 'syz.1.6686': attribute type 10 has an invalid length. [ 903.453628][T24530] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6686'. [ 903.467854][T24532] device bridge_slave_1 left promiscuous mode [ 903.531034][T24532] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.625409][T24532] device bridge_slave_0 left promiscuous mode [ 903.632755][T24532] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.268160][T24530] netlink: 'syz.1.6686': attribute type 10 has an invalid length. [ 904.583286][T24555] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6681'. [ 904.706696][T24555] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6681'. [ 904.748094][T24559] FAULT_INJECTION: forcing a failure. [ 904.748094][T24559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.846358][T24559] CPU: 1 PID: 24559 Comm: syz.1.6682 Not tainted syzkaller #0 [ 904.853890][T24559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 904.863961][T24559] Call Trace: [ 904.867252][T24559] [ 904.870333][T24559] dump_stack_lvl+0x188/0x24e [ 904.875058][T24559] ? show_regs_print_info+0x12/0x12 [ 904.880290][T24559] ? load_image+0x410/0x410 [ 904.884816][T24559] ? __lock_acquire+0x7c40/0x7c40 [ 904.889862][T24559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 904.895872][T24559] should_fail_ex+0x390/0x4c0 [ 904.900594][T24559] _copy_from_user+0x2c/0x170 [ 904.905376][T24559] kstrtouint_from_user+0xda/0x170 [ 904.910505][T24559] ? kstrtol_from_user+0x190/0x190 [ 904.915656][T24559] proc_fail_nth_write+0x8b/0x200 [ 904.920781][T24559] ? proc_fail_nth_read+0x220/0x220 [ 904.926000][T24559] ? common_file_perm+0x171/0x1c0 [ 904.931050][T24559] ? proc_fail_nth_read+0x220/0x220 [ 904.936276][T24559] vfs_write+0x2dc/0x9a0 [ 904.940541][T24559] ? file_end_write+0x250/0x250 [ 904.945409][T24559] ? __fget_files+0x28/0x460 [ 904.950017][T24559] ? __fget_files+0x3fc/0x460 [ 904.954717][T24559] ? __fdget_pos+0x2ae/0x360 [ 904.959490][T24559] ? ksys_write+0x70/0x260 [ 904.963940][T24559] ksys_write+0x14d/0x260 [ 904.968316][T24559] ? __ia32_sys_read+0x80/0x80 [ 904.973111][T24559] do_syscall_64+0x4c/0xa0 [ 904.977635][T24559] ? clear_bhb_loop+0x60/0xb0 [ 904.982325][T24559] ? clear_bhb_loop+0x60/0xb0 [ 904.987104][T24559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.993027][T24559] RIP: 0033:0x7f724715e90e [ 904.997453][T24559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 905.017093][T24559] RSP: 002b:00007f7247fdffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 905.025550][T24559] RAX: ffffffffffffffda RBX: 00007f7247fe06c0 RCX: 00007f724715e90e [ 905.033626][T24559] RDX: 0000000000000001 RSI: 00007f7247fe00a0 RDI: 000000000000000a [ 905.041614][T24559] RBP: 00007f7247fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 905.049597][T24559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.057584][T24559] R13: 00007f7247426038 R14: 00007f7247425fa0 R15: 00007fff465c8b08 [ 905.065589][T24559] [ 906.667608][T24594] netlink: 'syz.4.6694': attribute type 10 has an invalid length. [ 906.684042][T24594] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6694'. [ 906.708333][T24594] netlink: 'syz.4.6694': attribute type 10 has an invalid length. [ 906.846728][T24594] team0: Port device wlan1 added [ 906.867382][T24599] device bridge_slave_1 left promiscuous mode [ 906.888557][T24599] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.934695][T24599] device bridge_slave_0 left promiscuous mode [ 906.954061][T24599] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.583080][T24615] netlink: 'syz.4.6698': attribute type 10 has an invalid length. [ 907.717664][T24617] netlink: 'syz.3.6700': attribute type 10 has an invalid length. [ 907.809414][T24617] device macvlan0 entered promiscuous mode [ 907.896033][T24617] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 908.751460][T24644] netlink: 'syz.1.6718': attribute type 10 has an invalid length. [ 908.853532][T24646] netlink: 'syz.2.6708': attribute type 10 has an invalid length. [ 908.896206][T24646] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6708'. [ 908.931436][T24650] netlink: 'syz.2.6708': attribute type 10 has an invalid length. [ 908.980767][T24650] team0: Port device wlan1 added [ 909.134174][T24654] tun0: tun_chr_ioctl cmd 1074025681 [ 910.090151][T24677] netlink: 'syz.2.6722': attribute type 10 has an invalid length. [ 910.230700][T24684] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6723'. [ 910.260744][T24684] device bridge_slave_1 entered promiscuous mode [ 910.290098][T24683] netlink: 'syz.4.6725': attribute type 10 has an invalid length. [ 910.307067][T24683] device macvlan0 entered promiscuous mode [ 910.432159][T24683] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 910.781107][T24695] netlink: 'syz.3.6730': attribute type 39 has an invalid length. [ 910.874053][T24701] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6728'. [ 911.004392][T24703] team0: Port device wlan1 added [ 911.010231][T24707] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6733'. [ 911.027918][T24707] device bridge_slave_1 entered promiscuous mode [ 912.082211][T24742] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.6743'. [ 912.121053][T24744] validate_nla: 2 callbacks suppressed [ 912.121075][T24744] netlink: 'syz.3.6745': attribute type 2 has an invalid length. [ 912.317234][T24747] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 912.375636][T24747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.546204][T24756] netlink: 'syz.2.6748': attribute type 10 has an invalid length. [ 913.581530][T24785] netlink: 'syz.2.6760': attribute type 2 has an invalid length. [ 914.131396][T24785] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 914.276075][T24785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.052126][T24833] netlink: 'syz.0.6775': attribute type 10 has an invalid length. [ 918.509440][T24847] netlink: 'syz.1.6779': attribute type 2 has an invalid length. [ 918.523255][T24844] netlink: 'syz.4.6778': attribute type 10 has an invalid length. [ 918.541555][T24844] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6778'. [ 918.554400][T24844] device hsr0 entered promiscuous mode [ 918.594990][T24848] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 918.658833][T24848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.721546][T24850] netlink: 'syz.0.6780': attribute type 13 has an invalid length. [ 918.742745][T24850] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6780'. [ 918.759705][T24850] erspan0: refused to change device tx_queue_len [ 918.770936][T24850] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 919.493619][T24881] netlink: 'syz.3.6802': attribute type 2 has an invalid length. [ 919.501469][T24881] netlink: 'syz.3.6802': attribute type 4 has an invalid length. [ 919.549469][T24881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6802'. [ 919.650333][T24885] netlink: 'syz.1.6793': attribute type 10 has an invalid length. [ 919.663343][T24885] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6793'. [ 919.680789][T24885] device hsr0 entered promiscuous mode [ 919.696559][T24889] netlink: 'syz.0.6795': attribute type 2 has an invalid length. [ 919.917306][T24889] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 919.929567][T24898] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.6797'. [ 919.963634][T24889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 920.091656][T24905] netlink: 'syz.4.6800': attribute type 10 has an invalid length. [ 921.227397][T24938] netlink: 'syz.2.6810': attribute type 10 has an invalid length. [ 921.246902][T24938] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6810'. [ 921.267421][T24938] device hsr0 entered promiscuous mode [ 923.522135][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 923.604947][T25002] validate_nla: 1 callbacks suppressed [ 923.604984][T25002] netlink: 'syz.4.6830': attribute type 10 has an invalid length. [ 923.665091][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6830'. [ 925.590486][T25062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6847'. [ 925.643390][T25064] netlink: 'syz.3.6846': attribute type 10 has an invalid length. [ 925.665918][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6846'. [ 925.725553][T25068] netlink: 'syz.2.6851': attribute type 10 has an invalid length. [ 926.383066][T25087] netlink: 'syz.2.6859': attribute type 10 has an invalid length. [ 926.900873][T25105] netlink: 'syz.4.6866': attribute type 3 has an invalid length. [ 926.925347][T25106] netlink: 'syz.2.6865': attribute type 10 has an invalid length. [ 926.939938][T25105] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6866'. [ 926.983963][T25106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6865'. [ 928.073300][T25138] netlink: 'syz.1.6876': attribute type 13 has an invalid length. [ 928.081695][T25138] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6876'. [ 928.199184][T25138] syz_tun: refused to change device tx_queue_len [ 928.217152][T25138] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 928.488705][T25152] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.6880'. [ 928.493060][T25153] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.6880'. [ 928.595136][T25153] openvswitch: netlink: Flow actions attr not present in new flow. [ 928.634522][T25157] netlink: 'syz.1.6881': attribute type 10 has an invalid length. [ 928.655527][T25152] openvswitch: netlink: Flow actions attr not present in new flow. [ 928.693858][T25159] netlink: 'syz.2.6883': attribute type 10 has an invalid length. [ 928.710209][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6881'. [ 930.199450][T25212] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 931.104436][T25237] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6908'. [ 931.240473][T25237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.346122][T25237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.407847][T25237] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 931.418528][T25237] bond0 (unregistering): Released all slaves [ 931.439830][T25241] netlink: 'syz.0.6909': attribute type 10 has an invalid length. [ 931.685125][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.692003][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.983991][T25255] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 932.937231][T25299] netlink: 'syz.4.6930': attribute type 46 has an invalid length. [ 932.951905][T25299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6930'. [ 932.962225][T11899] wlan1: Trigger new scan to find an IBSS to join [ 933.180628][T25304] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 933.502910][T25312] netlink: 'syz.2.6934': attribute type 10 has an invalid length. [ 934.021882][ T4664] wlan1: Trigger new scan to find an IBSS to join [ 934.831399][T25353] netlink: 'syz.4.6949': attribute type 13 has an invalid length. [ 934.840512][T25353] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6949'. [ 934.863864][T25353] erspan0: refused to change device tx_queue_len [ 934.873674][T25353] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 935.054506][T25357] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 935.979601][T25384] Ÿë: port 1(gretap0) entered blocking state [ 936.001956][ T4664] wlan1: Trigger new scan to find an IBSS to join [ 936.004779][T25384] Ÿë: port 1(gretap0) entered disabled state [ 936.044101][T25384] device gretap0 entered promiscuous mode [ 936.247034][T25392] netlink: 'syz.2.6962': attribute type 10 has an invalid length. [ 936.687298][T25409] netlink: 'syz.2.6968': attribute type 29 has an invalid length. [ 936.807203][T25409] netlink: 'syz.2.6968': attribute type 29 has an invalid length. [ 937.042160][ T4654] wlan1: Trigger new scan to find an IBSS to join [ 937.567506][T25422] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6972'. [ 938.796993][T25470] netlink: 'syz.3.6988': attribute type 10 has an invalid length. [ 938.882094][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 939.042511][ T4654] wlan1: Trigger new scan to find an IBSS to join [ 939.146255][T25480] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6992'. [ 939.343151][T25487] delete_channel: no stack [ 939.981312][ T4661] wlan1: Creating new IBSS network, BSSID 06:1c:76:9e:4a:9c [ 940.002071][ T4641] wlan1: Creating new IBSS network, BSSID 8a:1e:15:3d:55:e0 [ 940.010451][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 940.046435][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 940.374579][T25522] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7006'. [ 940.631403][T25532] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7008'. [ 941.025865][T25539] netlink: 'syz.4.7011': attribute type 2 has an invalid length. [ 941.051590][T25539] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7011'. [ 941.091373][T25541] netlink: 'syz.1.7013': attribute type 10 has an invalid length. [ 941.125156][T25542] netlink: 'syz.4.7011': attribute type 2 has an invalid length. [ 941.163361][T25539] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 941.190902][T25542] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7011'. [ 941.858481][T25564] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7022'. [ 942.107270][T25571] netlink: 'syz.2.7023': attribute type 3 has an invalid length. [ 942.129661][T25571] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7023'. [ 942.329848][T25573] netlink: 'syz.2.7023': attribute type 39 has an invalid length. [ 943.228340][T25596] netlink: 'syz.1.7028': attribute type 2 has an invalid length. [ 943.260155][T25596] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7028'. [ 943.304261][T25593] netlink: 'syz.1.7028': attribute type 2 has an invalid length. [ 943.321970][T25593] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7028'. [ 943.346373][T25593] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 944.699377][T25637] netlink: 'syz.0.7045': attribute type 2 has an invalid length. [ 944.743772][T25637] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7045'. [ 944.818770][T25641] netlink: 'syz.0.7045': attribute type 2 has an invalid length. [ 944.853233][T25645] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 944.898533][T25641] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7045'. [ 949.472167][T25721] netlink: 'syz.2.7072': attribute type 10 has an invalid length. [ 949.480045][T25721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7072'. [ 949.515836][T25721] team0: Device geneve0 is up. Set it down before adding it as a team port [ 949.532314][T25721] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 950.032730][T25742] netlink: 'syz.1.7081': attribute type 39 has an invalid length. [ 950.616664][T25771] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.7092'. [ 951.124910][T25786] sctp: [Deprecated]: syz.1.7098 (pid 25786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 951.124910][T25786] Use struct sctp_sack_info instead [ 951.969777][T25811] netlink: 'syz.0.7105': attribute type 39 has an invalid length. [ 952.775006][T25837] netlink: 'syz.3.7115': attribute type 10 has an invalid length. [ 952.822210][T25837] netlink: 'syz.3.7115': attribute type 10 has an invalid length. [ 953.606389][T25859] syz.0.7122[25859] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 954.322207][T25896] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7134'. [ 954.390705][T25896] netlink: 'syz.3.7134': attribute type 10 has an invalid length. [ 954.403865][T25896] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7134'. [ 958.304177][T26006] netlink: 'syz.3.7174': attribute type 3 has an invalid length. [ 958.343119][T26006] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7174'. [ 958.553400][T26012] netlink: 'syz.1.7177': attribute type 10 has an invalid length. [ 958.698003][T26016] netlink: 'syz.3.7180': attribute type 10 has an invalid length. [ 959.217275][T26024] tipc: Started in network mode [ 959.249724][T26024] tipc: Node identity 9215a268, cluster identity 4711 [ 959.264733][T26024] tipc: Node number set to 2450891368 [ 959.290512][T26032] netlink: 'syz.2.7183': attribute type 2 has an invalid length. [ 959.327794][T26032] netlink: 'syz.2.7183': attribute type 8 has an invalid length. [ 959.371670][T26032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7183'. [ 961.213244][T26074] tipc: Started in network mode [ 961.233480][T26074] tipc: Node identity 9215a268, cluster identity 4711 [ 961.240458][T26074] tipc: Node number set to 2450891368 [ 961.328521][T26074] netlink: 'syz.0.7202': attribute type 2 has an invalid length. [ 961.372916][T26074] netlink: 'syz.0.7202': attribute type 8 has an invalid length. [ 961.383433][T26074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7202'. [ 961.885886][T26086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7206'. [ 962.677279][T26088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7206'. [ 963.311072][T26119] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7214'. [ 963.339489][T26121] netlink: 'syz.0.7213': attribute type 10 has an invalid length. [ 963.348353][T26121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7213'. [ 963.359012][T26121] team0: Device geneve0 is up. Set it down before adding it as a team port [ 963.369196][T26121] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 963.425218][T26112] netlink: 'syz.2.7214': attribute type 1 has an invalid length. [ 963.437740][T26112] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.7214'. [ 963.996734][T26131] tipc: Started in network mode [ 964.016779][T26131] tipc: Node identity 9215a268, cluster identity 4711 [ 964.039739][T26131] tipc: Node number set to 2450891368 [ 964.065875][T26134] netlink: 'syz.3.7218': attribute type 2 has an invalid length. [ 964.086835][T26134] netlink: 'syz.3.7218': attribute type 8 has an invalid length. [ 964.106186][T26134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7218'. [ 964.481821][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 964.950908][T26156] netlink: 'syz.0.7229': attribute type 3 has an invalid length. [ 964.979386][T26156] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7229'. [ 965.399568][T26159] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7228'. [ 965.470244][T26159] netlink: 'syz.3.7228': attribute type 1 has an invalid length. [ 965.490093][T26159] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.7228'. [ 965.797438][T26175] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7234'. [ 967.213494][T26209] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.7247'. [ 967.312675][T26214] netlink: 'syz.3.7247': attribute type 39 has an invalid length. [ 967.362167][T26209] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.7247'. [ 968.089546][T25845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 969.853094][T26266] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7270'. [ 970.042845][ T4664] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 970.564082][T26298] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.7279'. [ 972.696617][T26364] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7304'. [ 973.595155][T26405] netlink: 'syz.0.7317': attribute type 3 has an invalid length. [ 973.652067][T26405] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7317'. [ 973.870786][T26415] netlink: 'syz.3.7315': attribute type 27 has an invalid length. [ 973.959916][T26410] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7315'. [ 974.412446][T26429] netlink: 'syz.4.7326': attribute type 1 has an invalid length. [ 975.146468][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 975.160501][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 975.169514][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 975.178794][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 975.205132][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 975.219901][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 975.904768][T26442] chnl_net:caif_netlink_parms(): no params data found [ 976.261355][ T4654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.294553][T26442] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.312280][T26442] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.352395][T26442] device bridge_slave_0 entered promiscuous mode [ 976.460137][ T4654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.542593][T26442] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.549770][T26442] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.568887][T26442] device bridge_slave_1 entered promiscuous mode [ 976.628073][T26468] netlink: 'syz.0.7337': attribute type 27 has an invalid length. [ 976.801450][ T4654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.858085][T26442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.905753][ T4654] bond0: (slave netdevsim0): Releasing backup interface [ 976.936994][ T4654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.955557][T26468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7337'. [ 976.968951][T26442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.076433][T26442] team0: Port device team_slave_0 added [ 977.174360][T26442] team0: Port device team_slave_1 added [ 977.195503][T26493] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.7342'. [ 977.282208][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 977.309969][T26442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.403504][T26442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.654319][T26442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.362124][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 980.002858][T26442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.009958][T26442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.081979][T26442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.238452][ T4654] tipc: Left network mode [ 980.266022][T26442] device hsr_slave_0 entered promiscuous mode [ 980.323643][T26442] device hsr_slave_1 entered promiscuous mode [ 980.361287][T26442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 980.369009][T26442] Cannot create hsr debugfs directory [ 981.442411][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 983.522187][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 985.538562][T26598] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.7368'. [ 985.639627][ T4654] device gretap0 left promiscuous mode [ 985.661913][ T4654] Ÿë: port 1(gretap0) entered disabled state [ 986.137797][T26617] netlink: 'syz.0.7374': attribute type 1 has an invalid length. [ 986.169691][T26617] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7374'. [ 986.375440][T26626] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.7377'. [ 986.435009][T26626] openvswitch: netlink: Flow actions attr not present in new flow. [ 986.484343][ T4654] team0: Port device wlan1 removed [ 986.507966][T26624] netlink: 'syz.4.7377': attribute type 5 has an invalid length. [ 986.516159][T26624] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7377'. [ 986.915496][T26442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 987.013329][ T4654] device hsr_slave_0 left promiscuous mode [ 987.046799][ T4654] device hsr_slave_1 left promiscuous mode [ 987.109548][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.128498][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.211581][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.233260][ T4654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.400560][ T4654] device veth1_macvtap left promiscuous mode [ 987.414292][ T4654] device veth0_macvtap left promiscuous mode [ 987.428363][ T4654] device veth1_vlan left promiscuous mode [ 987.439922][ T4654] device veth0_vlan left promiscuous mode [ 988.146603][ T4654] team0 (unregistering): Port device geneve1 removed [ 988.572694][T26683] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.7393'. [ 988.582826][T26683] openvswitch: netlink: Flow actions attr not present in new flow. [ 988.698822][ T4654] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 989.130029][ T4654] team0 (unregistering): Port device team_slave_1 removed [ 989.198814][ T4654] team0 (unregistering): Port device team_slave_0 removed [ 989.285316][ T4654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.335060][ T4654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.639471][ T4654] bond0 (unregistering): Released all slaves [ 989.668735][T26442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 989.689025][T26682] netlink: 'syz.2.7393': attribute type 5 has an invalid length. [ 989.721942][T26682] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7393'. [ 989.752476][T26442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 989.763367][T26442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 989.946007][T26697] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7397'. [ 990.081838][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 990.147687][T26442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.210516][T26442] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.263084][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 990.271661][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 990.316870][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 990.345964][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 990.382044][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.389327][T13670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.559716][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 990.599717][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 990.623015][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.630250][T13670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.172301][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.179284][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.338150][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 993.364553][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 993.382097][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 993.401413][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 993.414540][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 993.429159][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 993.439643][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 993.449647][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 993.502533][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.552476][T26442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 993.597743][T26442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 993.743439][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 993.765587][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 993.821347][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 993.893624][T26749] netlink: 'syz.4.7408': attribute type 2 has an invalid length. [ 993.901591][T26749] netlink: 'syz.4.7408': attribute type 8 has an invalid length. [ 993.931990][T26749] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7408'. [ 994.118423][T26766] netlink: 'syz.3.7411': attribute type 3 has an invalid length. [ 994.146948][T26766] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7411'. [ 994.449243][T26779] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.7415'. [ 994.589971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 994.618557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 994.636519][T26442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.710522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.752611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.810808][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.833448][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.843673][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.866547][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.888573][T26442] device veth0_vlan entered promiscuous mode [ 994.924168][T26442] device veth1_vlan entered promiscuous mode [ 995.011189][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 995.029432][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 995.047529][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.072957][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.098649][T26442] device veth0_macvtap entered promiscuous mode [ 995.139218][T26442] device veth1_macvtap entered promiscuous mode [ 995.187991][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.221888][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.252935][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.265413][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.304510][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.341499][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.372035][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.397502][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.439973][T26442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.519622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.546586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.571171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.580791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.595689][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.606908][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.618905][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.639010][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.653578][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.671976][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.697383][T26442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.756291][T26442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.796788][T26442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.833277][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.848966][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.862358][T26442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.871167][T26442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.891868][T26442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.903752][T26442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.193302][ T4664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.221230][ T4664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.264730][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.318714][ T4654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.328596][ T4654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.339128][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 997.734026][T26869] netlink: 'syz.4.7443': attribute type 3 has an invalid length. [ 997.805342][T26869] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7443'. [ 997.926610][T26870] netlink: 'syz.4.7443': attribute type 3 has an invalid length. [ 997.952295][T26870] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7443'. [ 998.155604][T26877] : port 1(ip6gretap0) entered blocking state [ 998.163334][T26877] : port 1(ip6gretap0) entered disabled state [ 998.194830][T26877] device ip6gretap0 entered promiscuous mode [ 998.260010][T26883] device ip6gretap0 left promiscuous mode [ 998.279391][T26883] : port 1(ip6gretap0) entered disabled state [ 999.056259][T26907] netlink: 'syz.0.7455': attribute type 13 has an invalid length. [ 999.162127][T26907] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.7455'. [ 999.668696][T26934] netlink: 'syz.3.7463': attribute type 3 has an invalid length. [ 999.707269][T26934] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.7463'. [ 999.933357][T26944] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7466'. [ 999.964197][T26944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1000.021136][T26944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1000.306782][T26945] netlink: 'syz.2.7467': attribute type 3 has an invalid length. [ 1000.383667][T26945] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7467'. [ 1001.163786][ T4654] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1002.145262][T26992] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1002.551213][T26988] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7480'. [ 1007.248639][T27047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1007.366303][T27047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1009.237830][T27079] netlink: 'syz.4.7506': attribute type 3 has an invalid length. [ 1009.254027][ T4661] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1009.267078][T27079] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7506'. [ 1009.805813][T27101] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7510'. [ 1009.853932][T27101] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1009.861830][T27101] #PF: supervisor instruction fetch in kernel mode [ 1009.868348][T27101] #PF: error_code(0x0010) - not-present page [ 1009.874352][T27101] PGD 796b9067 P4D 796b9067 PUD 0 [ 1009.879471][T27101] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1009.884847][T27101] CPU: 1 PID: 27101 Comm: syz.3.7510 Not tainted syzkaller #0 [ 1009.892294][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.902345][T27101] RIP: 0010:0x0 [ 1009.905977][T27101] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1009.913514][T27101] RSP: 0018:ffffc900060d7498 EFLAGS: 00010246 [ 1009.919608][T27101] RAX: 1ffffffff162ab93 RBX: 1ffff92000c1aea4 RCX: 0000000000000001 [ 1009.927602][T27101] RDX: ffffc900060d7540 RSI: 0000000000000001 RDI: ffff888028956000 [ 1009.935566][T27101] RBP: ffffc900060d75b0 R08: ffff88802895603f R09: 1ffff1100512ac07 [ 1009.943548][T27101] R10: dffffc0000000000 R11: ffffed100512ac08 R12: ffffe8ffffd9f650 [ 1009.951511][T27101] R13: ffffffff8b155c98 R14: 0000000000000000 R15: ffff888028956000 [ 1009.959514][T27101] FS: 00007f6ece5856c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1009.968446][T27101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.975025][T27101] CR2: ffffffffffffffd6 CR3: 0000000076c24000 CR4: 00000000003506e0 [ 1009.982995][T27101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1009.991134][T27101] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1009.999181][T27101] Call Trace: [ 1010.002454][T27101] [ 1010.005379][T27101] bond_xdp_xmit+0x31e/0x550 [ 1010.010062][T27101] ? bond_xdp_xmit+0x94/0x550 [ 1010.014739][T27101] ? bond_xdp+0x8c0/0x8c0 [ 1010.019068][T27101] bq_xmit_all+0xca9/0x1120 [ 1010.023628][T27101] ? bpf_bprintf_prepare+0x1258/0x1450 [ 1010.029096][T27101] ? bq_enqueue+0x2ef/0x3d0 [ 1010.033594][T27101] ? __dev_flush+0x1b0/0x1b0 [ 1010.038175][T27101] ? dev_map_enqueue_multi+0xf89/0x10f0 [ 1010.043735][T27101] ? dev_map_enqueue+0x330/0x330 [ 1010.048680][T27101] ? rcu_is_watching+0x11/0xa0 [ 1010.053531][T27101] ? trace_xdp_redirect+0xb3/0x2b0 [ 1010.058636][T27101] __dev_flush+0xbf/0x1b0 [ 1010.062964][T27101] xdp_do_flush+0xa/0x20 [ 1010.067199][T27101] bpf_test_run_xdp_live+0x1549/0x1a90 [ 1010.072657][T27101] ? 0xffffffffa0004440 [ 1010.076892][T27101] ? text_poke_copy+0x7b/0x90 [ 1010.081648][T27101] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 1010.087191][T27101] ? xdp_convert_md_to_buff+0x330/0x330 [ 1010.092780][T27101] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1010.099051][T27101] ? bpf_test_init+0x119/0x140 [ 1010.103806][T27101] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1010.109259][T27101] bpf_prog_test_run_xdp+0x757/0xf80 [ 1010.114546][T27101] ? __lock_acquire+0x7c40/0x7c40 [ 1010.119568][T27101] ? dev_put+0x80/0x80 [ 1010.123632][T27101] ? dev_put+0x80/0x80 [ 1010.127689][T27101] bpf_prog_test_run+0x31c/0x390 [ 1010.132691][T27101] __sys_bpf+0x62b/0x780 [ 1010.136929][T27101] ? bpf_link_show_fdinfo+0x380/0x380 [ 1010.142306][T27101] ? lock_chain_count+0x20/0x20 [ 1010.147153][T27101] __x64_sys_bpf+0x78/0x90 [ 1010.151573][T27101] do_syscall_64+0x4c/0xa0 [ 1010.156075][T27101] ? clear_bhb_loop+0x60/0xb0 [ 1010.160745][T27101] ? clear_bhb_loop+0x60/0xb0 [ 1010.165419][T27101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.171375][T27101] RIP: 0033:0x7f6ecd79e0d9 [ 1010.175782][T27101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.195477][T27101] RSP: 002b:00007f6ece585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1010.203968][T27101] RAX: ffffffffffffffda RBX: 00007f6ecda26090 RCX: 00007f6ecd79e0d9 [ 1010.211948][T27101] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1010.220052][T27101] RBP: 00007f6ecd835024 R08: 0000000000000000 R09: 0000000000000000 [ 1010.228283][T27101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.236246][T27101] R13: 00007f6ecda26128 R14: 00007f6ecda26090 R15: 00007ffe9c0a78e8 [ 1010.244224][T27101] [ 1010.247243][T27101] Modules linked in: [ 1010.251136][T27101] CR2: 0000000000000000 [ 1010.255291][T27101] ---[ end trace 0000000000000000 ]--- [ 1010.260817][T27101] RIP: 0010:0x0 [ 1010.264277][T27101] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1010.271714][T27101] RSP: 0018:ffffc900060d7498 EFLAGS: 00010246 [ 1010.277771][T27101] RAX: 1ffffffff162ab93 RBX: 1ffff92000c1aea4 RCX: 0000000000000001 [ 1010.285784][T27101] RDX: ffffc900060d7540 RSI: 0000000000000001 RDI: ffff888028956000 [ 1010.294107][T27101] RBP: ffffc900060d75b0 R08: ffff88802895603f R09: 1ffff1100512ac07 [ 1010.302069][T27101] R10: dffffc0000000000 R11: ffffed100512ac08 R12: ffffe8ffffd9f650 [ 1010.310029][T27101] R13: ffffffff8b155c98 R14: 0000000000000000 R15: ffff888028956000 [ 1010.317987][T27101] FS: 00007f6ece5856c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1010.326992][T27101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.333564][T27101] CR2: ffffffffffffffd6 CR3: 0000000076c24000 CR4: 00000000003506e0 [ 1010.341551][T27101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1010.349577][T27101] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1010.357653][T27101] Kernel panic - not syncing: Fatal exception in interrupt [ 1010.365088][T27101] Kernel Offset: disabled [ 1010.369621][T27101] Rebooting in 86400 seconds..