last executing test programs: 3.998245048s ago: executing program 4 (id=6819): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a10a001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000a80)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000004", @ANYRES32], 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x4, 0x2, 0x401, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r8, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000bc0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x10, 0x2, 0x0, 0x26400, 0xffffffffffffffff, 0x2}, 0x58) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @exit, @ldst={0x1, 0x2, 0x4, 0x4, 0xa, 0xfffffffffffffff0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x49, '\x00', r10, 0x25, r12, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x3, 0x1, 0xc6b1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r13], &(0x7f0000000f40)=[{0x0, 0x5, 0x0, 0xb}, {0x3, 0x1, 0x6, 0xb}, {0x1, 0x2, 0xd, 0x5}, {0x4, 0x1, 0xc, 0x5}, {0x1, 0x4, 0x1}, {0x1, 0x5, 0xe, 0x9}], 0x10, 0x4}, 0x94) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x3, 0xe, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}]}, &(0x7f0000001100)='GPL\x00', 0x6, 0xd, &(0x7f0000001140)=""/13, 0x41000, 0x2b, '\x00', r4, @sched_cls=0x2f, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x1, 0x0, 0x8, 0x7}, 0x10, r11, r2, 0x4, &(0x7f00000011c0)=[r5, r3], &(0x7f0000001200)=[{0x5, 0x4, 0x6, 0xb}, {0x5, 0x5, 0x0, 0x6}, {0x4, 0x5, 0xf, 0x1}, {0x4, 0x2}], 0x10, 0x3}, 0x94) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000008206000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7020000000002008500000086000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x5, 0x8, 0x5, 0x48001, 0x1, 0x72d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%+9llu \x00'}, 0x20) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3b3d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xd, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x6, 0xa, 0x7, 0xffffffffffffffe0, 0xf}, @call={0x85, 0x0, 0x0, 0xc2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x19, '\x00', r4, @fallback=0x37, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x7, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[r6, r7, r13, r14, r15, r16, r17, r18, r19], &(0x7f00000007c0)=[{0x1, 0x2, 0x1, 0x2}, {0x5, 0x4, 0x1, 0x6}, {0x2, 0x1, 0xa, 0x9}, {0x5, 0x5, 0xb, 0x7}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x5, 0xa, 0x3}, {0x3, 0x5, 0xc, 0x1}], 0x10, 0xa}, 0x94) 3.701540307s ago: executing program 1 (id=6821): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x1, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000baf2017a31277ce6587aae4d511c000000000000000000000008109600000000009500000000000019c2b39155c01a2f1dd42952b3cd9a4171281d299126dc6058353e9a7620d5fb493d20f5a2469f707590ca1b1d69addf2cc96972"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) close(r0) 3.6005222s ago: executing program 4 (id=6824): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000180), 0x1}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb01001800000000000000980000009800000006000000100000000000001101000000fbffffff08000000000000010500000010000001000000000000008502000000020000000800008405000000000000000400000002000000000000f3d911ff395d222e7e3ac12c6be000000000008000000010000000040000000400000003000000010000001c2100000d00000004000000ec09000010000000020000000000000000000000030000000c00000010000000010000000400000000000061da00"], &(0x7f0000000340)=""/142, 0xb6, 0x8e, 0x1}, 0x28) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000fc0), 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2104) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @random="02001400ac14"}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@fallback, 0xffffffffffffffff, 0x16, 0x0, r4, @void, @value=r4}, 0x20) (async) write$cgroup_subtree(r3, &(0x7f0000001000)=ANY=[@ANYBLOB="0000000000800000000000"], 0xc) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000f80)={r0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x2, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x1}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x40}, 0x28) (async) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x100, @local, 0x4}, 0x80, 0x0}, 0x804) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e81"], 0x48) 3.557037301s ago: executing program 0 (id=6825): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @cb_func={0x18, 0x9}], &(0x7f0000000840)='syzkaller\x00', 0x5, 0xc1, &(0x7f0000000880)=""/193, 0x41000, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x9, 0x6, 0x5f3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0xffffffff, 0x8}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x32, 0xb, 0x8, 0x7, 0x45298, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x12, 0x2b, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2902, 0xb5, &(0x7f00000002c0)=""/181, 0x41100, 0x11, '\x00', r2, @cgroup_sock_addr=0x35, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x4, 0x4, 0x8000, 0x1ff}, 0x10, r4, r5, 0x3, &(0x7f0000000d80)=[r6, r7, r8, r9, r10, r11, 0x1, 0x1], &(0x7f0000000dc0)=[{0x3, 0x2, 0x7, 0xa}, {0x4, 0x5, 0xc, 0xb}, {0x4, 0x5, 0x3, 0x5}], 0x10, 0x780}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ec0)=r4, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0xa, [@volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @fwd={0x9}, @datasec={0xc, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x797, 0x3}, {0x2, 0x6, 0x6}, {0x4, 0x5}, {0x5, 0x6, 0x9}], "832d"}]}, {0x0, [0x0, 0x30, 0x61, 0x5f07a85528810798, 0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000f80)=""/86, 0x7a, 0x56, 0x1, 0xfffffffb, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r0, 0x36, 0x0, 0x3aa, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)={@map=r6, r0, 0x2f, 0x1, r5, @void, @value=r0, @void, @void, r12}, 0x20) (async) recvmsg$kcm(r0, &(0x7f0000002880)={&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001240)=""/243, 0xf3}, {&(0x7f0000001340)=""/238, 0xee}, {&(0x7f0000001440)=""/177, 0xb1}, {&(0x7f0000001500)=""/40, 0x28}, {&(0x7f0000001540)=""/175, 0xaf}, {&(0x7f0000001600)=""/177, 0xb1}, {&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001780)=""/83, 0x53}], 0x8, &(0x7f0000001880)=""/4096, 0x1000}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000028c0)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000003f40)={&(0x7f0000002900)=@phonet={0x23, 0x8, 0x80, 0x8}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002980)="075ea43602573edbe2a290d671840010807cf24087030d49d44168b4efc6a08e3edeaf38241280ad6389a797f6ec942d1df7e24c498fedb477ca697ee63b2a662dbbb1e40468cad407e64ef1bac4d4cb08a843fbf5592ce55f2a0f908192f40c919e20b8557abca93285d6bd4d845a14694b2476fb3b0c5e5b344c2727c97b94a8bb1782c8bb089febcca7ac7dde13e14460f0947df9d3adcdfcadcdd12e2396ab7f71ad6f784dbe6efcc9e0d14fb94f5b1cb239bc2e", 0xb6}, {&(0x7f0000002a40)="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", 0xfb}, {&(0x7f0000002b40)="203ec2e78b01f05e7f71957050e7de7fae5def0f37810e0c7bf7bdc0f4d6543fa4db848ac15167fb48c42ed7f0ff798995069ff4d419a5979990a4e3bcd95c7e40eca8c3cafed5125aa4b72d944da84938f5d714698aecf2099d5ad33371d72dc5c4c7b59a130c9cf3a3a21390e8920618cbd9e9a0ffdba0089ebd9395485f19155d9a1b9385f46017d8c759c7c5abadfb0480af8592a105dee6bcdf19991f353704efacc28098f4e4abfee48de507906eb76523d8e8791cd0b5027c069f9f503e2e4159ede61bdb4a2e6088aed53832dee65de359f31551a63c61b982274ac12dfe72ec674aa4", 0xe7}, {&(0x7f0000002c40)="1b42ebbd3238a9211a08448bd0b12d0982f83200121394966334033d15540835296f865f02ce19a5147f34105c04c7", 0x2f}, {&(0x7f0000002c80)="6c8bf43cdbe2aa173700fda2", 0xc}, {&(0x7f0000002cc0)="3f89b0def32a71823007a064493f", 0xe}, {&(0x7f0000002d00)="55e9d3265692b46cc6023d3c421802525335261bec3db6899419b8246e7757f0e9c33e79452933cb4aab8eefb9d5e0aba4d42358aea24f624f95e0b33ea942280c6344f3925ae23d35b49ca82e9d2a4562fd9bc34b1a6d5bf16223ce7bb5ab21777c0f63de5e04b5731e388fb789686c9a9a6837a9dabc6f0bd4bc12eede4ef01bd99e6468ae0c677909ec89a17e295547053051b4959d5b214c760ab91ee17698c5c03a9497144537354cb45fa26a5533606889a4622ab5f5a427f1d187bba90ba0", 0xc2}], 0x7, &(0x7f0000002e80)=[{0x98, 0x11, 0x2, "1f8a3a6affed399483b05049650558bfec270bdb5f8564081b015899a18434042e69784228444863ba9047ac720c131e63a7ec5219bf41fb4a2ceec4c5893ce65ba7831e3f7afa145f8d0e79d344f949e798781c4759ae24428a8478379604e8a7d8c742ecd634396b4d58b70ae77696d582f813c834332c10b3b79028776c80332885eddafa324f"}, {0x1010, 0x88, 0x39, "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"}], 0x10a8}, 0x800) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003f80)={0x80000001, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003fc0)=r13, 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000004000), 0x4) (async) r14 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004080)={r14, r0, 0x0, 0x2, &(0x7f0000004040)='&\x00'}, 0x30) (async) perf_event_open(&(0x7f00000040c0)={0x4, 0x80, 0x4, 0x1, 0x2, 0x3, 0x0, 0x6, 0x20, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2c, 0x1, @perf_config_ext={0x2, 0x8}, 0x400, 0x417daff5, 0x9317, 0x2, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x3}, r14, 0x4, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000004640)={&(0x7f0000004140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000004580)=[{&(0x7f0000004180)="e49af3b68966fc40b583f3a8ef1de31c55f0155d0c", 0x15}, {&(0x7f00000041c0)="68262c7ed2b1107b6572c25e041a4aa54e9ef029c60485415665a798fe050ba491d468e088ce6a808dbfef15021313c7cb7eb2829dfafd3f3b659a4b151f1721c54da30f031f26d7f10abf95ffb8d3e94a382f7bb59da5ecdf4813aadeb34b7e0a7a2ca175a1a516c97ac3a3a0fc4344c3fa3616", 0x74}, {&(0x7f0000004240)="f53a077e553d9a568ee98ee7e0a6f78973f1904a45b055e06eaded590d56fb5caa6aae2be053d2294f70edf57427ab3200772a36500f9def8c83b473ba610f23e225f7cf1706cc3602a07504c7143517118cf3e60c27bb7322a4f30b4ae71e85ea69b104ed06060e977959e32522014ce63038c1be85531324549669171a2fb741dcd63d75c83f81e7c978006c1a1071fa59b1c7f611f0213213dac94db821930a84fa7989306864a996cc6468af78366acb53cadbfa811788ce2df11089d31de6f709a4335841c153f12d2b244eb7cae2d1", 0xd2}, {&(0x7f0000004340)="6293ecd319b427c3fbf55ee1cbaa13572f637bc6926a642ec2c8ee58ff39f503b1d5327c42ef987e17c7294f7feba72176b9372621a50649cf0b106e0e55416b507215da12d08bfce7ee1c4a8489b5b4a59f096f3499b65a010ec3885824dc80aa41e50593a39b47ff0fc0e698ecc3d2a290a788981615ec", 0x78}, {&(0x7f00000043c0)="16c4f4202929558da0c299fdcdf54eb4861bffcd09312233830c30cfc9568efd0e95a46b66d682c74c8d61016b231f9e82ca86c22d78de1750853f70c80c79be528396a367c1585e791834233d1d9979f33bc059db47438a799db625bab1fa9c5edb912caca9dba6b515038b11f28340e7ab1e7b4c9164fa", 0x78}, {&(0x7f0000004440)="fc407376e90281ebc02e9a548277d7e5d51a4232d420d2e61d9723000755f94532fa750b71c3538e0817717908ca6582942b32480944bda7d1f408bc7ac351abd0214c8248b60f6e01aa358a8103a5d427a343cc4a4cd3a8a1578a6894da27b5e08f1c0ec60e55431eb46d788953a763146cf7a6faa3d06cceba34f5bff07fbf4510e8a5258a605c9064cee6d56a83cf2d4f7796c9b31d434a5ec480e4772eaa7aa3c57e", 0xa4}, {&(0x7f0000004500)="65457d5f1290e171663d26c5b23967bcc085be39ffd2", 0x16}, {&(0x7f0000004540)}], 0x8, &(0x7f0000004600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}], 0x18}, 0x80) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000047c0)={r3, 0x20, &(0x7f0000004780)={&(0x7f0000004680)=""/128, 0x80, 0x0, &(0x7f0000004700)=""/102, 0x66}}, 0x10) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000004800)={r0, r0}) mkdir(&(0x7f0000004840)='./file0\x00', 0x10) 3.351669537s ago: executing program 1 (id=6827): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f000085000000230000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000380)='ns/cgroup\x00') r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0x8, 0x9, 0x7, 0x0, 0x400, 0x200, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x6}, 0x65d3c2c5f334cdc4, 0x4, 0x1, 0x6, 0x3c93, 0x172, 0x7fff, 0x0, 0x24, 0x0, 0x5}, r3, 0x6, r4, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r9, 0x4, r10}, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000700ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 3.340150338s ago: executing program 0 (id=6828): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xd, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001280)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x16, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000049fa000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000895db5d867f59f91b0a1f5e9290f14000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018470000060000000000000000000000bf91000000000000b7020000010000008500000084000000b700"], &(0x7f00000011c0)='GPL\x00', 0x10001, 0x18, &(0x7f0000001200)=""/24, 0x40f00, 0x23, '\x00', 0x0, @flow_dissector=0x11, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001240)={0x4, 0x0, 0x9, 0x2}, 0x10, r3, r2, 0x0, &(0x7f00000012c0)=[r0], 0x0, 0x10, 0xc89e}, 0x94) 3.27730566s ago: executing program 3 (id=6829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780), &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000800), 0x0, 0x10, &(0x7f00000008c0), 0x0, 0x0, 0x98, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0x3, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000000b00)=""/169, 0x2b, 0xa9, 0x1, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@exit, @cb_func={0x18, 0xf, 0x4, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000c00)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r5], 0x0, 0x10, 0xffffff81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 3.157361603s ago: executing program 4 (id=6830): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400030404009bbc", 0x5a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c", 0x19}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x0, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 3.096228895s ago: executing program 2 (id=6831): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xa300400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.998766358s ago: executing program 3 (id=6832): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x80ffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x10, 0x0, 0x9, 0xf60, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu<-0\t&&') r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) 2.858388483s ago: executing program 4 (id=6833): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:*\vrww'], 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair(0x2, 0x3, 0x1, &(0x7f0000000180)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70a00000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd1b, '\x00', 0x0, r1, 0x4, 0x4, 0x5}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r10}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r11, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, r11, 0x10, '\x00', r12, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x80000081}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x14002000, &(0x7f00000003c0)="88b1216232", 0x5, &(0x7f0000000400), &(0x7f0000000680), &(0x7f00000006c0)="13f90339e64bdfed0119697a6dfcba9fc6074c4266718c42bcaf746047771bb7f5e4") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061d3bd3b5b97c6d8868e119f00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.855838903s ago: executing program 0 (id=6843): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0xa4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 2.228192262s ago: executing program 2 (id=6834): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="eee6f70000000010000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) (async) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b0d, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x6e, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x81) (async) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x81) socket$kcm(0x10, 0x400000002, 0x0) (async) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37040006", 0x27}], 0x1}, 0x4) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33) r10 = socket$kcm(0x21, 0x2, 0xa) socket$kcm(0xa, 0x922000000004, 0x11) sendmsg$kcm(r10, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0xfffffffa, '\x00', 0x0, r11, 0x1, 0x4, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0xffffffffffffff66, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0xffffffffffffff66, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) 2.172079663s ago: executing program 0 (id=6835): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffff"], 0x0, 0xfffffff8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x692, 0x5}, 0x11540, 0x0, 0x0, 0x6, 0x1, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) (async) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x87) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2.166301973s ago: executing program 3 (id=6836): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0xfffffffffffffe31) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200007}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000200)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000100)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1bc1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="ff010400000000000000002ba1fdf410e69f"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b8c88f4c687508c321af8ffba460600000000bfa100000000000007010000f8ffffffb702000008000000b77a8bda09cc03000001000000850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r6}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'vlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 2.063697967s ago: executing program 1 (id=6837): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x7ffffffff000) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4b, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0xa}, 0x0, 0xc8, 0xfffffc01, 0x5, 0xfffffffffffffffc, 0x7, 0x81, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15004dab"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800030007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e1469f723f8fab862c1be73cdc8a22f9df6955cb0ceaa4601eddc7c37a66cbb5a93e8cd9602592a50f58b6857e0b0d3b88d2de5767bd06252a5935d5225116e552370ddd74a1ef492a40461a650f09f1f5c0529ce637f0e133b08392a9015247ff97915f1e536d6227f549c21def443fb4e04977870ee0aa806bb525d03f96158aeee60809a9d23ae6f1302717cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000440)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x6, [@datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x6}], 'S'}, @const={0x7, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x61, 0x61, 0x30]}}, &(0x7f0000000d80)=""/149, 0x46, 0x95, 0x1, 0xcbf}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xc, 0x0, 0x0, 0x0, 0x8, r6, 0x8, '\x00', r7, r8, 0x4, 0x4, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95c24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4064, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782", 0xc}], 0x1}, 0x4004) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x9c) socket$kcm(0x29, 0x2, 0x0) 1.843227854s ago: executing program 0 (id=6838): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0249, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x1, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x19) r2 = gettid() r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x1, 0x40, 0x9b, 0x0, 0x20000000, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_config_ext={0xf43, 0x10000}, 0x3200, 0x8, 0x6cdf, 0x9, 0x7, 0x4, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r0, 0x2) r4 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfc, 0x3, 0x7, 0x9, 0x0, 0x8000, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x7, 0x200, 0x1, 0x2, 0x40, 0x8, 0x0, 0x9, 0x0, 0xfffffffffffffff9}, r2, 0x7, r3, 0x1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002600)=@bpf_lsm={0x18, 0x7, &(0x7f00000026c0)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000900000009000000004000000030000000000000e0300000002000000010000000000000b050000000300000004000085000000000c00000002000000600000000200f400020000000900000009000000010000002e4300000e000000040000000180000003000000000000010000000075006a05020000000000000802000000000000000000000a050000000d00000000000011020000000900000000615f00"], &(0x7f0000000940)=""/50, 0xac, 0x32, 0x1, 0xff}, 0x28) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x5d, 0x0, 0xffffffffffffffff, 0x4, '\x00', r7, r8, 0x2, 0x0, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r4}, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x10000001, 0x4000056d, 0x2, 0x0, r9, 0x3, '\x00', r6, r8, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESDEC=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r13]}}], 0x18}, 0x0) recvmsg$unix(r12, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000004880)=""/4096, 0x1000}], 0x1}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fc11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.088160166s ago: executing program 2 (id=6839): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0xfffffffe, 0x6, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000580)="5c00000014006b02c84e21100af32c6e0a0675f8d344604000050000be7937696182949a36c21b3b48dfd8cdbf9367b41b99c1b74e98fa51f6db64c9f4d493803792684b0000b6c0504bb9183132be471b93c91b5d7870743719b4b5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.058170398s ago: executing program 1 (id=6840): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) socketpair(0xa, 0x80005, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x2b, 0x5, 0x4, &(0x7f0000000040)={0x0, 0x0}) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb4e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000000000bfa2fd000000000007020000f8ffff06b70300000400000000000085000000c30000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r6, @ANYRES16=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r12) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r9) 1.034820099s ago: executing program 4 (id=6841): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000065cace5967f7abd702bad409dd0bd955b2e5455cb46af965c66600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c509000035000800c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000065cace5967f7abd702bad409dd0bd955b2e5455cb46af965c66600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff7, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c509000035000800c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x4) (async) 944.045001ms ago: executing program 3 (id=6842): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000240)=@raw=[@exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000280)='syzkaller\x00', 0x8001, 0x2, &(0x7f0000000300)=""/2, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xc, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x1, 0x4, 0x5, 0x5}, {0x5, 0x1, 0x5, 0x3}, {0x1, 0x1, 0x4, 0x8}, {0x4, 0x3, 0xc, 0x4}, {0x1, 0x2, 0x3, 0xb}, {0x3, 0x2, 0x0, 0x3}, {0x2, 0x2, 0x7, 0xc}, {0x0, 0x4}, {0x1, 0x4, 0x2, 0x3}], 0x10, 0x5}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@o_path={&(0x7f0000000200)='./file0\x00', r0, 0x4000, r1}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac14"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 891.491723ms ago: executing program 0 (id=6844): r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000001140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'lo\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x4, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x25, &(0x7f0000000000), 0x90) sendmsg$kcm(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="1400000028000b6394f90509fc60000000000000", 0x14}], 0x1}, 0x20000040) close(r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="0600000000000000000000007800000078000000030000000900000000000008b50000000d0000000000000e02000000010000000400000003000093000002000000060000000010000010000000410d0000b60900000b00000005000000020000000000e9ff0300000d000000000800000005000000100000000100000003000000020000000c00000001000000006100f8a04b67f53b186badb489926222af733555cab50259ad53b4f69264b00f78acf8c99c83bc9b0526b06997e360422b08f8786473898be96c688d1a0ea6a148ef37f8399b9fc4aa5e6b3a7a4cb94ee1fcb0d26c"], &(0x7f0000001440)=""/86, 0x93, 0x56, 0x0, 0x7f, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="eeff0000040000fd070000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000c3e8650a95da887449"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff", @ANYRES8=0x0, @ANYRES16=r3, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=r5, @ANYRES64=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}, 0x40000001) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) 780.504816ms ago: executing program 1 (id=6845): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @func_proto]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2812], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x8230794d6280073) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r1, 0x8) 651.98882ms ago: executing program 4 (id=6846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000100)=0x80) socketpair(0x22, 0x2, 0x11, &(0x7f0000000640)) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x60}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2], 0xffffffffffffffaa}, 0x0) recvmsg$kcm(r3, &(0x7f0000001940)={&(0x7f00000003c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000840)=""/185, 0xb9}, {&(0x7f0000000900)=""/194, 0xc2}], 0x3, &(0x7f0000001880)=""/146, 0x92}, 0x2140) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x12003) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000440)=r4, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x801, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000037153e370248018000f01700d1bdcec3d438330f42f9545565f69234115dfbd35b184906ee7192fda364765d8c8afe5ee392aab41d412d0ce653707fa86204ae6dab5df4091bead5d82ba6b94c4a8e1401bfc1cbca78f2ff7a5abb97c607ae24097d70341eb447cf6f205f5407f178128f6ae58f827c89ad3c774ff9ac8ffcd82187dce9599ae92650bac5d0a5e95b44e8c625fd", 0xb4}], 0x1}, 0x0) 641.74515ms ago: executing program 2 (id=6847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000", @ANYBLOB="000000f34279e658765f2e"], 0x48) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x178, 0x178, 0x5, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x19, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x7fff, [{0x10, 0x3, 0x9}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0xc, 0x5}, {0x10, 0x1}, {0xc, 0x3}, {0x4, 0x3}, {0x1, 0x2}]}, @union={0xf, 0x2, 0x0, 0x5, 0x1, 0x5, [{0x3, 0x5, 0x7}, {0xb, 0x2, 0x3}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @enum64={0x4, 0x7, 0x0, 0x13, 0x0, 0x1, [{0x4, 0x7, 0x8}, {0x4, 0x3, 0x8}, {0x6, 0x2, 0x7}, {0xc, 0x2, 0x5}, {0xd, 0x9, 0xfffffffb}, {0xb, 0xb29, 0xeb}, {0x8, 0x53dca8fb, 0x7}]}, @func={0xa, 0x0, 0x0, 0xc, 0x5}, @struct={0x2, 0x7, 0x0, 0x4, 0x1, 0x3, [{0x5, 0x0, 0x7}, {0x8, 0x0, 0x1}, {0xa, 0x3, 0xffff}, {0xe, 0x2, 0x8}, {0x7, 0x2, 0x5b85}, {0x10, 0x0, 0x3}, {0xb, 0x4}]}]}, {0x0, [0x5f, 0x1e, 0x61]}}, &(0x7f0000000fc0)=""/55, 0x195, 0x37, 0x0, 0x8, 0x10000}, 0x28) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000010c0)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x1e, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x845, 0xc2, &(0x7f0000000d00)=""/194, 0x41100, 0x24, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001040)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001080)={0x1, 0x4, 0x2, 0x8ca}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[r0, r2, r3, r0, r0, r4, r0, r0, r0, r8], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x7, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) 591.561812ms ago: executing program 3 (id=6848): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x5) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x200) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) 422.416767ms ago: executing program 2 (id=6849): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c034004000000002000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) 270.889152ms ago: executing program 1 (id=6850): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/151, 0x84}, {&(0x7f00000003c0)=""/114}, {&(0x7f0000000240)=""/22}], 0x1, &(0x7f0000002f40)=""/244, 0x17}, 0x0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x2c, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe80, 0xfffffcc3, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000180), 0x2f01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff020037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910bb000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 250.741843ms ago: executing program 2 (id=6851): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x10006}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000195a7afe9600466a1409a7729d8d0f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000f1fffffffd0000000600000000010000", @ANYRES32=r2, @ANYBLOB="0100000000000000000000200000000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0300000002000000420000000700"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xff}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], &(0x7f0000000340)='syzkaller\x00', 0xc000, 0xe9, &(0x7f0000000380)=""/233, 0x41000, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x8001, 0x7f}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[{0x4, 0x3, 0x9, 0xa}, {0x0, 0x3, 0xd, 0x8}, {0x2, 0x1, 0xa, 0xa}, {0x3, 0x1, 0xb, 0x8}, {0x4, 0x4, 0x6}, {0x2, 0x5, 0xa, 0xc}, {0x3, 0x2, 0x2}], 0x10, 0x1}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r3) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="2e00000012008188040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x4000004) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f0000000180), &(0x7f0000000100)=r12}, 0x20) 0s ago: executing program 3 (id=6852): r0 = socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0xc) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000140)=""/235, 0x4e, 0xeb, 0x0, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x2ef3, 0x80000000, 0x20004, r3, 0x4, '\x00', r5, r6, 0x1, 0x4}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async, rerun: 32) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001803a641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) kernel console output (not intermixed with test programs): gth. [ 1273.156780][T25150] device syz_tun entered promiscuous mode [ 1273.194470][T25150] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1278.021024][T25204] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5728'. [ 1278.198160][T25201] netlink: 'syz.0.5726': attribute type 28 has an invalid length. [ 1278.217042][T25205] netlink: 'syz.4.5727': attribute type 39 has an invalid length. [ 1279.305770][T25232] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5736'. [ 1279.569486][T25235] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1279.650775][T25235] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1279.683135][T25235] bond0: (slave bond_slave_0): Releasing backup interface [ 1279.745592][T25235] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1279.804820][T25232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5736'. [ 1279.927569][T25246] netlink: 'syz.4.5738': attribute type 10 has an invalid length. [ 1279.947190][T25246] device syz_tun entered promiscuous mode [ 1280.014781][T25246] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1280.223314][T25250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1280.253025][T25250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1280.281033][T25252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1280.422648][T25260] netlink: 'syz.2.5743': attribute type 11 has an invalid length. [ 1280.480831][T25260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1280.503046][T25259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.769293][T25273] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5746'. [ 1281.052908][T25282] syz.2.5752[25282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1281.053022][T25282] syz.2.5752[25282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1281.243201][T25287] netlink: 'syz.0.5754': attribute type 10 has an invalid length. [ 1284.363101][T25299] netlink: 'syz.0.5756': attribute type 39 has an invalid length. [ 1284.654371][T25333] netlink: 'syz.1.5768': attribute type 11 has an invalid length. [ 1284.684468][T25333] __nla_validate_parse: 1 callbacks suppressed [ 1284.684486][T25333] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1284.871695][T25339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1285.661013][T25367] netlink: 'syz.3.5777': attribute type 27 has an invalid length. [ 1285.685948][T25367] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1285.722294][T25370] netlink: 'syz.0.5779': attribute type 2 has an invalid length. [ 1285.780905][T25370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5779'. [ 1286.091680][T25374] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.5779'. [ 1286.406933][T25382] netlink: 'syz.4.5782': attribute type 10 has an invalid length. [ 1286.475243][T25382] team0: Port device geneve1 added [ 1286.485941][T25385] netlink: 'syz.0.5793': attribute type 21 has an invalid length. [ 1286.522171][T25382] netlink: 'syz.4.5782': attribute type 29 has an invalid length. [ 1286.543838][T25382] netlink: 'syz.4.5782': attribute type 29 has an invalid length. [ 1286.565627][T25392] netlink: 'syz.4.5782': attribute type 29 has an invalid length. [ 1287.394815][T25421] netlink: 'syz.4.5791': attribute type 2 has an invalid length. [ 1287.406280][T25421] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 1287.416676][T25421] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1287.977145][T25440] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5799'. [ 1288.028973][T25439] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5799'. [ 1288.371502][T25452] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5803'. [ 1289.070851][T25468] device 0 entered promiscuous mode [ 1289.561074][T25477] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1289.926972][T25492] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1290.030680][T25477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.156593][T25477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.234314][T25477] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1290.274107][T25477] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1290.305973][T25477] bond0 (unregistering): Released all slaves [ 1290.699159][T25504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1290.724055][T25504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1292.658366][T25538] validate_nla: 4 callbacks suppressed [ 1292.658389][T25538] netlink: 'syz.4.5828': attribute type 3 has an invalid length. [ 1292.778305][T25538] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5828'. [ 1293.130162][T25542] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1294.296620][T25574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1294.309517][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1294.333896][T25574] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1294.348526][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1294.369750][T25574] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1294.386337][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1294.700584][T25577] netlink: 'syz.2.5841': attribute type 10 has an invalid length. [ 1296.953933][T25577] device macvlan0 left promiscuous mode [ 1297.077518][T25577] team0: Port device macvlan0 removed [ 1298.759123][T25627] netlink: 'syz.3.5855': attribute type 10 has an invalid length. [ 1298.773515][T25627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.822482][T25627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.196497][T25674] __nla_validate_parse: 2 callbacks suppressed [ 1301.196539][T25674] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.5871'. [ 1302.184664][T25699] device wg2 left promiscuous mode [ 1302.480039][T25707] netlink: 177648 bytes leftover after parsing attributes in process `syz.0.5882'. [ 1303.062041][T22850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1303.074392][T22850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1303.083033][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1303.091298][T22850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1303.097250][T25720] netlink: 'syz.0.5883': attribute type 10 has an invalid length. [ 1303.108741][T22850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1303.117192][T22850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1304.405998][T25740] device sit0 entered promiscuous mode [ 1304.466166][T25724] chnl_net:caif_netlink_parms(): no params data found [ 1304.646462][ T8176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.795496][ T8176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.065068][ T8176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.154434][T25724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.172590][T25724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.180464][T22850] Bluetooth: hci1: command 0x0409 tx timeout [ 1305.197187][T25724] device bridge_slave_0 entered promiscuous mode [ 1305.226400][ T8176] device netdevsim0 left promiscuous mode [ 1305.253512][T25768] netlink: 'syz.3.5896': attribute type 3 has an invalid length. [ 1305.257143][ T8176] team0: Port device netdevsim0 removed [ 1305.275650][T25768] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1305.297287][T25724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.304890][T25724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.313858][T25724] device bridge_slave_1 entered promiscuous mode [ 1305.322335][T25769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1305.384642][T25724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.404572][T25724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.428218][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.434614][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.567008][T25724] team0: Port device team_slave_0 added [ 1305.601765][T25724] team0: Port device team_slave_1 added [ 1305.684136][T25724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.712274][T25724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.835425][T25724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.887482][T25724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.907292][T25724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.964376][T25724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.023938][T25783] netlink: 'syz.0.5900': attribute type 29 has an invalid length. [ 1306.080336][T25783] netlink: 'syz.0.5900': attribute type 29 has an invalid length. [ 1306.107565][T25724] device hsr_slave_0 entered promiscuous mode [ 1306.126171][T25724] device hsr_slave_1 entered promiscuous mode [ 1306.133340][T25724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.150094][T25724] Cannot create hsr debugfs directory [ 1306.510030][T25796] netlink: 'syz.1.5904': attribute type 39 has an invalid length. [ 1306.676344][T25800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5906'. [ 1306.793254][T25800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5906'. [ 1306.817536][T25798] device wg2 entered promiscuous mode [ 1306.907805][T25802] netlink: 'syz.4.5905': attribute type 3 has an invalid length. [ 1306.998887][T25802] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5905'. [ 1307.257872][T22850] Bluetooth: hci1: command 0x041b tx timeout [ 1307.276556][T25809] netlink: 'syz.3.5908': attribute type 1 has an invalid length. [ 1307.319436][T25809] netlink: 'syz.3.5908': attribute type 3 has an invalid length. [ 1307.328275][T25809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5908'. [ 1307.365513][T25810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1307.378982][T25806] netlink: 'syz.0.5907': attribute type 3 has an invalid length. [ 1307.387212][T25806] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1307.553668][ T8176] device 0 left promiscuous mode [ 1307.847219][T25823] netlink: 'syz.0.5912': attribute type 7 has an invalid length. [ 1307.892888][T25823] netlink: 'syz.0.5912': attribute type 7 has an invalid length. [ 1307.922311][T25823] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1308.197528][T23720] tipc: Subscription rejected, illegal request [ 1309.337829][T22850] Bluetooth: hci1: command 0x040f tx timeout [ 1310.192965][T25724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1310.233742][T25886] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1310.337799][T25724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1310.356517][T25897] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5926'. [ 1310.421050][T25724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1310.607323][T25724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1310.643883][T25900] netlink: 'syz.4.5926': attribute type 21 has an invalid length. [ 1310.660875][T25900] netlink: 'syz.4.5926': attribute type 1 has an invalid length. [ 1310.708028][T25901] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1311.417907][T22850] Bluetooth: hci1: command 0x0419 tx timeout [ 1311.497176][T25724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.559157][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1311.574618][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1311.612583][T25724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.673370][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1311.700336][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1311.759912][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.767172][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.055197][ T8176] team0: Port device wlan1 removed [ 1312.108651][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1312.139963][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1312.162496][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1312.183273][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.190536][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.229023][T25949] tap0: tun_chr_ioctl cmd 2147767517 [ 1312.256726][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1312.271058][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1312.334415][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1312.364924][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1312.427379][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1312.449993][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1312.474083][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1312.519980][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1312.532566][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1312.546512][T25724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1312.561927][T25724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1312.587418][T25963] __nla_validate_parse: 1 callbacks suppressed [ 1312.587458][T25963] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1312.629171][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1312.645190][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1313.527751][T26000] netlink: 'syz.3.5951': attribute type 10 has an invalid length. [ 1314.128867][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1314.136491][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1314.148917][T26004] netlink: 'syz.1.5952': attribute type 2 has an invalid length. [ 1314.156844][T26004] netlink: 'syz.1.5952': attribute type 1 has an invalid length. [ 1314.171399][T26004] netlink: 'syz.1.5952': attribute type 4 has an invalid length. [ 1314.180663][T25724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.182645][T26004] netlink: 'syz.1.5952': attribute type 6 has an invalid length. [ 1314.241134][T26004] netlink: 'syz.1.5952': attribute type 7 has an invalid length. [ 1314.258171][ T8176] device hsr_slave_0 left promiscuous mode [ 1314.268208][T26004] netlink: 'syz.1.5952': attribute type 5 has an invalid length. [ 1314.293140][ T8176] device hsr_slave_1 left promiscuous mode [ 1314.318096][T26004] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1315.350779][ T8176] device team_slave_1 left promiscuous mode [ 1315.362013][ T8176] team0 (unregistering): Port device team_slave_1 removed [ 1316.337045][T26016] netlink: 'syz.3.5954': attribute type 9 has an invalid length. [ 1316.367983][T26016] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5954'. [ 1316.512273][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1316.549714][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1316.660037][T26033] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1316.682364][T25724] device veth0_vlan entered promiscuous mode [ 1316.738997][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1316.752408][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1316.769207][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1316.778800][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1316.795737][T25724] device veth1_vlan entered promiscuous mode [ 1316.890646][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1316.932682][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1316.993419][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1317.036302][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1317.085249][T25724] device veth0_macvtap entered promiscuous mode [ 1317.121508][T25724] device veth1_macvtap entered promiscuous mode [ 1317.149467][T26051] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5965'. [ 1317.228834][T26054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5966'. [ 1317.287372][T25724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.328092][T25724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.370909][T25724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.386598][T25724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.403653][T25724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.556770][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1317.575456][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1317.606089][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1317.620780][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1317.635633][T25724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.652378][T25724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.663234][T25724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.680887][T25724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.705119][T25724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.721934][T25724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.769218][T25724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.779160][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1317.790818][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1317.833917][T25724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.843867][T25724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.853048][T25724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.862890][T25724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.086464][T23720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.127130][T23720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.190493][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1318.284348][T26062] netlink: 'syz.0.5968': attribute type 1 has an invalid length. [ 1318.293144][T23720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.313935][T23720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.324200][T26062] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5968'. [ 1318.355270][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1319.460444][T26094] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.5975'. [ 1319.704732][T26100] netlink: 'syz.1.5976': attribute type 10 has an invalid length. [ 1320.583638][T26109] netlink: 'syz.2.5980': attribute type 10 has an invalid length. [ 1320.699627][T26109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.813494][T26109] device bridge_slave_1 left promiscuous mode [ 1320.830108][T26109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.030628][T26109] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1321.104613][T26110] netlink: 'syz.2.5980': attribute type 10 has an invalid length. [ 1321.370179][T22850] Bluetooth: hci5: unexpected event 0x04 length: 151 > 10 [ 1321.955754][T26128] netlink: 'syz.4.5983': attribute type 7 has an invalid length. [ 1322.002460][T26136] cgroup: fork rejected by pids controller in /syz0 [ 1322.018530][T26128] netlink: 'syz.4.5983': attribute type 1 has an invalid length. [ 1322.079920][T26128] netlink: 184904 bytes leftover after parsing attributes in process `syz.4.5983'. [ 1323.268671][T26267] netlink: 'syz.3.5995': attribute type 1 has an invalid length. [ 1323.336098][T23720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.377984][T26267] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.5995'. [ 1323.420045][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 1323.563043][T23720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.688698][T23720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.853268][T23720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.898402][T26277] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5999'. [ 1324.785264][T22850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1324.795623][T22850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1324.813183][T22850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1324.821892][T22850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1324.826155][T26307] can: request_module (can-proto-0) failed. [ 1324.839472][T22850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1324.849974][T22850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1325.583834][T26332] netlink: 'syz.1.6007': attribute type 1 has an invalid length. [ 1325.614959][T26332] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1325.829808][T26335] netlink: 'syz.1.6007': attribute type 29 has an invalid length. [ 1326.676517][T26306] chnl_net:caif_netlink_parms(): no params data found [ 1326.711987][T26354] tap0: tun_chr_ioctl cmd 1074025677 [ 1326.728521][T26354] tap0: linktype set to 270 [ 1326.792613][T26355] netlink: 'syz.2.6012': attribute type 9 has an invalid length. [ 1326.848028][T26355] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.6012'. [ 1326.939163][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 1328.416168][T23720] device hsr_slave_0 left promiscuous mode [ 1328.438237][T23720] device hsr_slave_1 left promiscuous mode [ 1328.460323][T23720] bridge0: port 3(dummy0) entered disabled state [ 1328.499636][T23720] device bridge_slave_1 left promiscuous mode [ 1328.519599][T23720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.574103][T23720] device bridge_slave_0 left promiscuous mode [ 1328.599071][T23720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.689024][T23720] device veth1_vlan left promiscuous mode [ 1328.708619][T23720] device veth0_vlan left promiscuous mode [ 1329.018268][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 1329.276945][T23720] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1329.913479][T23720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.311620][T23720] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1330.321213][T23720] bond0 (unregistering): Released all slaves [ 1330.433689][T26399] netlink: 'syz.2.6018': attribute type 2 has an invalid length. [ 1330.441664][T26399] netlink: 'syz.2.6018': attribute type 8 has an invalid length. [ 1330.449599][T26399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6018'. [ 1330.477970][T26306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.485172][T26306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.575488][T26306] device bridge_slave_0 entered promiscuous mode [ 1330.685822][T26306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.719714][T26306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.745452][T26306] device bridge_slave_1 entered promiscuous mode [ 1330.894366][T26306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.948143][T26306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.097933][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 1331.099239][T26306] team0: Port device team_slave_0 added [ 1331.150076][T26306] team0: Port device team_slave_1 added [ 1331.307984][T26306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.315251][T26306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.458636][T26306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.568697][T26306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.575759][T26306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.639458][T26306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.888154][T26306] device hsr_slave_0 entered promiscuous mode [ 1331.937493][T26306] device hsr_slave_1 entered promiscuous mode [ 1332.346200][T26460] sock: sock_set_timeout: `syz.4.6029' (pid 26460) tries to set negative timeout [ 1333.177734][T22850] Bluetooth: hci2: command 0x0419 tx timeout [ 1333.560734][T26306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1333.700614][T26306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1334.205556][T26306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1334.256750][T26306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1334.834549][T26306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.961674][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1334.990512][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1335.036956][T26306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.136845][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1335.150356][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1335.231807][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.240515][ T8118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.298250][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1335.337333][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1335.360209][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1335.388795][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.396074][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.428284][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1335.494101][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1335.523998][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1335.575189][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1335.644272][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1335.695541][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1335.730922][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1335.785550][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1335.810955][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1335.858616][T26541] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6046'. [ 1335.919126][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1335.939347][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1335.988909][T26306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1336.293603][T26561] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.6051'. [ 1337.319570][T26590] netlink: 'syz.4.6055': attribute type 2 has an invalid length. [ 1337.693189][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1337.712400][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.766348][T26306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.922165][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1337.958807][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1338.092501][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1338.130455][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1338.620952][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1338.649224][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1338.680871][T26306] device veth0_vlan entered promiscuous mode [ 1340.041504][T26634] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6064'. [ 1342.763601][T26306] device veth1_vlan entered promiscuous mode [ 1342.774352][T26615] netlink: 'syz.3.6060': attribute type 13 has an invalid length. [ 1342.787123][T26615] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1342.804163][T26617] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1342.931229][T26306] device veth0_macvtap entered promiscuous mode [ 1342.975586][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1342.991968][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1343.040989][T26306] device veth1_macvtap entered promiscuous mode [ 1343.057250][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1343.086748][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1343.130872][T26306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.176610][T26306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.234660][T26306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.264480][T26306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.293318][T26306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.324802][T26306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.356063][T26306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.382026][T26644] netlink: 'syz.3.6067': attribute type 2 has an invalid length. [ 1343.397883][T26644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6067'. [ 1343.433324][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1343.470545][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1343.512842][T26306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.533043][T26306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.564685][T26306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.612747][T26306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.654729][T26306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.690491][T26306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.723592][T26306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.757490][T26306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.795116][T26306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.824930][T26647] netlink: 'syz.2.6068': attribute type 1 has an invalid length. [ 1343.851220][T26647] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.6068'. [ 1343.879250][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1343.898479][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1343.908650][T26653] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.6069'. [ 1343.952362][T26306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.969345][T26306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.023663][T26306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.053082][T26306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.310084][ T8118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.338126][ T8118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.387802][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1344.473831][ T8118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.524743][ T8118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.575521][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1344.759339][T26679] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6073'. [ 1346.963962][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1346.980266][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1346.991237][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1347.008971][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1347.016922][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1347.028184][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1347.162367][T26737] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1347.197723][T26737] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1347.595967][T26722] netlink: 'syz.1.6081': attribute type 1 has an invalid length. [ 1347.613226][T26722] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1347.996134][T26750] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1348.040354][T26750] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1348.142629][T26751] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1348.192304][T26751] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1348.854563][T26751] bond0: (slave bond_slave_0): Releasing backup interface [ 1348.878511][T26751] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1349.104543][T22850] Bluetooth: hci0: command 0x0409 tx timeout [ 1349.123460][T26772] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1349.279186][T22850] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1349.804295][T26730] chnl_net:caif_netlink_parms(): no params data found [ 1349.891617][ T8115] device 0 left promiscuous mode [ 1350.134882][T26794] netlink: 'syz.4.6092': attribute type 10 has an invalid length. [ 1350.624071][T26803] device veth1_macvtap left promiscuous mode [ 1351.182897][T26812] netlink: 'syz.4.6095': attribute type 1 has an invalid length. [ 1351.183002][T22850] Bluetooth: hci0: command 0x041b tx timeout [ 1351.208047][T26812] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.6095'. [ 1351.258791][T26815] device veth1_macvtap entered promiscuous mode [ 1351.265215][T26815] device macsec0 entered promiscuous mode [ 1351.281444][T26730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.297089][T26730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.316122][T26730] device bridge_slave_0 entered promiscuous mode [ 1351.401416][T26730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.417252][T26730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.442114][T26730] device bridge_slave_1 entered promiscuous mode [ 1351.666820][T26821] device syzkaller0 entered promiscuous mode [ 1351.806289][T26730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.969332][T26841] netlink: 'syz.0.6102': attribute type 9 has an invalid length. [ 1351.982149][T26841] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6102'. [ 1353.263971][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 1355.341393][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 1355.438097][T26834] netlink: 'syz.2.6098': attribute type 10 has an invalid length. [ 1355.576168][T26834] team0 (unregistering): Port device team_slave_0 removed [ 1355.604766][T26834] team0 (unregistering): Port device team_slave_1 removed [ 1355.644428][T26730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.847156][T26730] team0: Port device team_slave_0 added [ 1355.951928][T26730] team0: Port device team_slave_1 added [ 1356.084517][T26730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.108520][T26730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.207595][T26730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.517397][T26730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.529386][T26730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.584591][T26730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.836333][T26730] device hsr_slave_0 entered promiscuous mode [ 1356.888601][T26730] device hsr_slave_1 entered promiscuous mode [ 1356.922561][T26730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1356.989194][T26730] Cannot create hsr debugfs directory [ 1360.345946][T26932] netlink: 'syz.4.6116': attribute type 39 has an invalid length. [ 1360.530801][T26932] device hsr_slave_1 left promiscuous mode [ 1360.656815][T26936] netlink: 'syz.1.6113': attribute type 10 has an invalid length. [ 1360.841310][T26936] team0 (unregistering): Port device team_slave_0 removed [ 1360.896018][T26936] team0 (unregistering): Port device team_slave_1 removed [ 1361.041638][T26945] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6117'. [ 1361.058219][T26947] netlink: 'syz.0.6117': attribute type 13 has an invalid length. [ 1361.078319][T26947] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6117'. [ 1361.145206][T26947] syz_tun: refused to change device tx_queue_len [ 1361.197840][T26947] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1361.422432][T26962] netlink: 'syz.4.6120': attribute type 21 has an invalid length. [ 1361.603191][ T8115] device veth0_to_team left promiscuous mode [ 1361.625117][ T8115] Ÿë: port 1(veth0_to_team) entered disabled state [ 1361.704894][ T8115] device hsr_slave_0 left promiscuous mode [ 1361.785583][ T8115] device hsr_slave_1 left promiscuous mode [ 1361.800990][ T8115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.854475][ T8115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.001632][ T8115] device veth1_vlan left promiscuous mode [ 1362.017130][ T8115] device veth0_vlan left promiscuous mode [ 1366.655538][T26975] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6123'. [ 1366.861129][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.867559][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.696619][T26730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1367.743380][T26730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1367.765080][T26730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1367.801849][T26730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1368.246958][T26730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.380469][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1368.399685][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1368.442077][T26730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.493974][T27051] netlink: 'syz.4.6139': attribute type 1 has an invalid length. [ 1368.510458][T27049] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1368.520985][T27051] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1368.543500][T27050] netlink: 'syz.2.6141': attribute type 19 has an invalid length. [ 1368.625648][T27050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6141'. [ 1368.696417][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1368.723278][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1368.748791][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.756030][ T8118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.780335][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1369.169279][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1369.219963][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.227233][ T8118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.313476][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1369.378306][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1369.429300][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1369.477459][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1369.557075][T26730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1369.650727][T26730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1369.778709][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1369.807263][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1369.838743][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1369.876682][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1369.915774][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1369.947000][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1369.972381][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1370.011164][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1370.083717][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1371.672278][T27075] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1371.856490][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1371.875429][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1371.925114][T26730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.102116][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1372.122269][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1372.179816][T27088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6146'. [ 1372.219517][T27089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6146'. [ 1372.232640][T27092] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.6147'. [ 1372.267185][T27092] netlink: 'syz.1.6147': attribute type 10 has an invalid length. [ 1372.337104][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1372.353031][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1372.373765][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1372.400669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1372.412006][T26730] device veth0_vlan entered promiscuous mode [ 1372.444272][T26730] device veth1_vlan entered promiscuous mode [ 1372.529180][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1372.558015][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1372.582046][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1372.594109][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1372.616506][T26730] device veth0_macvtap entered promiscuous mode [ 1372.651364][T27105] netlink: 'syz.2.6149': attribute type 21 has an invalid length. [ 1372.674595][T27103] netlink: 'syz.2.6149': attribute type 21 has an invalid length. [ 1372.698806][T26730] device veth1_macvtap entered promiscuous mode [ 1372.716615][T27104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1372.790116][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.818253][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.837821][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.858592][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.897793][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.927132][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.946801][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.957613][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.988619][T26730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.026572][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1373.049692][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1373.079648][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1373.148952][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1373.201292][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.237839][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.254926][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.282934][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.303291][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.324150][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.337946][T26730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.357932][T26730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.409031][T26730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.454108][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1373.506026][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1373.578919][T26730] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.644588][T26730] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.657041][T26730] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.727946][T26730] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.811983][T27128] netlink: 'syz.0.6154': attribute type 3 has an invalid length. [ 1377.976033][T23718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.040728][T23718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.078059][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1378.133894][ T8118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.205641][ T8118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.228135][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1378.594992][T27195] netlink: 'syz.3.6075': attribute type 29 has an invalid length. [ 1378.616263][T27195] netlink: 'syz.3.6075': attribute type 29 has an invalid length. [ 1378.644632][T27193] netlink: 'syz.3.6075': attribute type 29 has an invalid length. [ 1378.708534][T27200] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.6169'. [ 1378.731040][T27198] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1378.752186][T27200] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1378.771442][T27198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1379.364126][T27208] netlink: 'syz.2.6172': attribute type 9 has an invalid length. [ 1379.436298][T27208] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.6172'. [ 1379.479336][T27216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6172'. [ 1379.563100][T22850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1379.573509][T22850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1379.583321][T22850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1379.613119][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1379.622660][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1379.631171][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1379.816860][ T8117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.014305][ T8117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.151594][ T8117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.280922][ T8117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.698727][ T8117] device .*! left promiscuous mode [ 1380.853576][T27217] chnl_net:caif_netlink_parms(): no params data found [ 1381.275266][T27258] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6183'. [ 1381.299779][T27260] netlink: 'syz.0.6181': attribute type 3 has an invalid length. [ 1381.318362][T27258] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1381.370747][ T8117] device ip6gretap0 left promiscuous mode [ 1381.399225][ T8117] : port 1(ip6gretap0) entered disabled state [ 1381.553184][T27261] netlink: 'syz.2.6182': attribute type 39 has an invalid length. [ 1381.624720][T27261] device veth0_macvtap left promiscuous mode [ 1381.672479][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 1381.759680][T27269] tap0: tun_chr_ioctl cmd 1074025677 [ 1381.850069][T27269] tap0: linktype set to 1 [ 1381.958183][T27217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.965743][T27217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.968864][T27272] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6185'. [ 1382.017257][T27217] device bridge_slave_0 entered promiscuous mode [ 1382.041820][T27217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.055961][T27217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.066105][T27217] device bridge_slave_1 entered promiscuous mode [ 1382.189215][T27279] netlink: 'syz.3.6187': attribute type 29 has an invalid length. [ 1382.374834][T27278] netlink: 'syz.2.6186': attribute type 21 has an invalid length. [ 1382.407197][T27279] netlink: 'syz.3.6187': attribute type 29 has an invalid length. [ 1382.428158][T27283] netlink: 'syz.3.6187': attribute type 29 has an invalid length. [ 1382.574010][T27284] netlink: 'syz.3.6187': attribute type 29 has an invalid length. [ 1382.604730][T27217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.663667][T27287] netlink: 'syz.3.6187': attribute type 29 has an invalid length. [ 1382.849451][T27217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.053464][T27217] team0: Port device team_slave_0 added [ 1383.082903][T27217] team0: Port device team_slave_1 added [ 1383.265116][ T8117] device gretap0 left promiscuous mode [ 1383.273563][ T8117] ÿÿ: port 1(gretap0) entered disabled state [ 1383.286879][T27217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.294365][T27217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.323588][T27217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.403309][T27217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.416816][T27217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.494218][T27217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.676373][T27217] device hsr_slave_0 entered promiscuous mode [ 1383.700362][T27217] device hsr_slave_1 entered promiscuous mode [ 1383.728051][T27217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1383.735709][T27217] Cannot create hsr debugfs directory [ 1383.742913][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 1384.884080][T27334] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.6197'. [ 1384.931961][T27334] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1385.302327][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6199'. [ 1385.818179][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 1385.908711][T27350] netlink: 'syz.0.6200': attribute type 2 has an invalid length. [ 1385.920084][T27350] netlink: 'syz.0.6200': attribute type 8 has an invalid length. [ 1385.938855][T27350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6200'. [ 1386.016549][T27351] netlink: 'syz.0.6200': attribute type 2 has an invalid length. [ 1386.039928][T27351] netlink: 'syz.0.6200': attribute type 8 has an invalid length. [ 1386.067587][T27351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6200'. [ 1386.411056][ T8117] device hsr_slave_0 left promiscuous mode [ 1386.426538][ T8117] device hsr_slave_1 left promiscuous mode [ 1386.453813][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.497619][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.540990][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.551161][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.584631][ T8117] device veth1_vlan left promiscuous mode [ 1386.595483][ T8117] device veth0_vlan left promiscuous mode [ 1387.900184][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 1388.199601][T27390] netlink: 'syz.4.6209': attribute type 7 has an invalid length. [ 1388.207600][T27390] netlink: 'syz.4.6209': attribute type 1 has an invalid length. [ 1388.269273][T27390] netlink: 184904 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1388.495367][T27396] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.6210'. [ 1390.087256][T27386] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.6208'. [ 1390.169997][T27217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1390.212908][T27217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1390.290582][T27217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1390.330955][T27217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1390.971183][T27434] netlink: 'syz.0.6218': attribute type 10 has an invalid length. [ 1391.059680][T27434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.076046][T27434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.209144][T27431] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6216'. [ 1391.619699][T27434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.628722][T27434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.651859][T27434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.669908][T27434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.004405][T27434] team0: Port device bridge0 added [ 1392.076796][T27217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.087048][T27436] netlink: 'syz.0.6218': attribute type 39 has an invalid length. [ 1392.138846][T27439] netlink: 'syz.0.6218': attribute type 39 has an invalid length. [ 1392.316929][T27217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.424545][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1392.454855][T27457] netlink: 'syz.3.6220': attribute type 3 has an invalid length. [ 1392.472064][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1392.488597][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1392.498504][T27457] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6220'. [ 1392.519483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1392.541900][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.549191][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.620688][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1392.638478][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1392.659133][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1392.674440][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.681742][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.692022][T27454] : port 1(ip6gretap0) entered blocking state [ 1392.704383][T27454] : port 1(ip6gretap0) entered disabled state [ 1392.734606][T27454] device ip6gretap0 entered promiscuous mode [ 1392.785425][T27461] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6221'. [ 1392.816333][T27462] device ip6gretap0 left promiscuous mode [ 1392.826009][T27462] : port 1(ip6gretap0) entered disabled state [ 1392.885198][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1392.904467][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1392.930600][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1392.970553][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1392.994546][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1393.057450][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1393.095934][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1393.157492][T27217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1393.212371][T27217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1393.245319][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1393.275353][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1393.308852][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1393.345100][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1393.503745][T27472] netlink: 'syz.0.6222': attribute type 10 has an invalid length. [ 1393.557323][T27472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6222'. [ 1393.650871][T27472] batman_adv: batadv0: Adding interface: vlan1 [ 1393.687828][T27472] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.846780][T27472] batman_adv: batadv0: Interface activated: vlan1 [ 1393.864980][T23720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1393.914475][T27490] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6224'. [ 1394.007491][T27493] netlink: 'syz.3.6225': attribute type 1 has an invalid length. [ 1394.080388][T27493] netlink: 'syz.3.6225': attribute type 4 has an invalid length. [ 1394.101411][T27493] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6225'. [ 1394.839224][T27523] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6228'. [ 1394.905365][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1394.922641][T27517] netlink: 'syz.0.6227': attribute type 3 has an invalid length. [ 1394.937527][T27517] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1394.949748][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1394.969428][T27523] netlink: 'syz.2.6228': attribute type 20 has an invalid length. [ 1395.001321][T27217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.142330][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1395.173097][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1395.295027][T27217] device veth0_vlan entered promiscuous mode [ 1395.355328][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1395.384084][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1395.413259][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1395.429533][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1395.519376][T27217] device veth1_vlan entered promiscuous mode [ 1395.801096][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1395.823334][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1395.886089][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1395.945979][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1395.992866][T27217] device veth0_macvtap entered promiscuous mode [ 1396.067809][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1396.095213][T27217] device veth1_macvtap entered promiscuous mode [ 1396.209359][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.259950][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.298509][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.347732][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.369370][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.390441][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.410842][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.480137][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.522229][T27217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.572077][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1396.593711][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1397.413514][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.434399][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.454871][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.469742][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.481539][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.492420][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.505842][T27217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1397.522633][T27217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1397.550485][T27217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.586229][T27217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.595996][T27217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.606975][T27217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.622821][T27217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.635475][T27563] netlink: 'syz.2.6236': attribute type 10 has an invalid length. [ 1397.651326][T27563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1397.681723][T27563] batman_adv: batadv0: Adding interface: vlan1 [ 1397.713759][T27563] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.795798][T27563] batman_adv: batadv0: Interface activated: vlan1 [ 1397.810670][T27576] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6239'. [ 1397.847990][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1397.861004][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1397.889460][T27584] netlink: 'syz.3.6241': attribute type 6 has an invalid length. [ 1397.897364][T27584] netlink: 'syz.3.6241': attribute type 30 has an invalid length. [ 1398.017897][T27587] netlink: 'syz.2.6242': attribute type 21 has an invalid length. [ 1398.044211][T27587] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6242'. [ 1398.056884][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6242'. [ 1398.157377][ T8120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.179124][ T8120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.217228][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1398.316551][T27599] netlink: 'syz.2.6246': attribute type 3 has an invalid length. [ 1398.325936][ T8118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.347750][ T8118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.355749][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1398.390762][T27599] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6246'. [ 1399.712772][T27623] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.6253'. [ 1400.034072][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1400.046240][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1400.055679][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1400.064271][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1400.077312][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1400.085172][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1400.161474][T16157] bond0: (slave syz_tun): Releasing backup interface [ 1400.254886][T27636] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6257'. [ 1401.506244][T27647] delete_channel: no stack [ 1402.159290][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 1404.228234][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 1404.595857][T27657] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1404.606112][T27657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1404.779861][ T8117] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.843134][T27666] netlink: 'syz.3.6263': attribute type 10 has an invalid length. [ 1404.851560][T27666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6263'. [ 1404.861197][T27666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1404.925589][ T8117] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.054119][ T8117] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.306798][ T8117] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.062746][T27633] chnl_net:caif_netlink_parms(): no params data found [ 1406.298651][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 1406.764756][T27633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.782411][T27633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.809266][T27633] device bridge_slave_0 entered promiscuous mode [ 1406.871085][T27633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.899036][T27633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.925469][T27633] device bridge_slave_1 entered promiscuous mode [ 1406.927286][T27731] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1407.216821][T27731] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1407.422696][T27633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.462186][T27633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.736781][T27633] team0: Port device team_slave_0 added [ 1407.873273][T27633] team0: Port device team_slave_1 added [ 1407.987522][T27633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.036787][T27633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.081814][T27755] netlink: 'syz.1.6281': attribute type 2 has an invalid length. [ 1408.090872][T27633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.102782][T27755] netlink: 'syz.1.6281': attribute type 1 has an invalid length. [ 1408.131465][T27757] netlink: 'syz.0.6280': attribute type 3 has an invalid length. [ 1408.193157][T27633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.217896][T27757] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6280'. [ 1408.227516][T27633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.317931][T27633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.378187][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 1408.444785][T27755] netlink: 'syz.1.6281': attribute type 13 has an invalid length. [ 1408.473608][T27755] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6281'. [ 1408.528601][T27755] syz_tun: refused to change device tx_queue_len [ 1408.543752][T27755] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1409.006177][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.021069][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.042549][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.059750][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.071717][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.083826][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.120207][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.608239][T27766] net_ratelimit: 1108 callbacks suppressed [ 1409.608272][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.625535][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.637301][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.649470][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.660902][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.672472][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.684039][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.695712][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.707133][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1409.718982][T27766] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1410.081665][T27633] device hsr_slave_0 entered promiscuous mode [ 1410.472607][T27633] device hsr_slave_1 entered promiscuous mode [ 1410.491028][T27633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1410.510917][T27633] Cannot create hsr debugfs directory [ 1410.555551][ T8117] device hsr_slave_0 left promiscuous mode [ 1410.580174][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.627875][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.654964][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.662803][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.672416][ T8117] bridge0: port 3(dummy0) entered disabled state [ 1410.708427][ T8117] device bridge_slave_1 left promiscuous mode [ 1410.715827][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.750706][ T8117] device bridge_slave_0 left promiscuous mode [ 1410.757044][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.163555][ T8117] team0 (unregistering): Port device geneve1 removed [ 1411.452057][ T8117] team0 (unregistering): Port device virt_wifi0 removed [ 1411.706706][T27810] netlink: 'syz.1.6291': attribute type 11 has an invalid length. [ 1411.744215][T27810] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1411.765256][T27811] netlink: 'syz.1.6291': attribute type 3 has an invalid length. [ 1411.805635][T27811] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1412.136082][ T8117] team0 (unregistering): Port device team_slave_1 removed [ 1412.230620][ T8117] team0 (unregistering): Port device C removed [ 1412.374472][ T8117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.446694][T27808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.518831][ T8117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.024679][ T8117] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1413.037124][ T8117] bond0 (unregistering): Released all slaves [ 1413.204973][T27778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6286'. [ 1417.965693][T27834] netlink: 'syz.3.6294': attribute type 21 has an invalid length. [ 1417.974163][T27834] netlink: 'syz.3.6294': attribute type 1 has an invalid length. [ 1417.982591][T27834] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.6294'. [ 1417.992508][T27842] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1418.020852][T27842] net_ratelimit: 10342 callbacks suppressed [ 1418.020872][T27842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1418.333189][T27859] netlink: 'syz.3.6297': attribute type 29 has an invalid length. [ 1418.379925][T27859] netlink: 'syz.3.6297': attribute type 29 has an invalid length. [ 1418.635193][T27865] netlink: 'syz.3.6297': attribute type 29 has an invalid length. [ 1418.668634][T27859] netlink: 'syz.3.6297': attribute type 29 has an invalid length. [ 1418.874831][T27867] netlink: 'syz.3.6297': attribute type 29 has an invalid length. [ 1418.956002][T27883] netlink: 'syz.0.6302': attribute type 13 has an invalid length. [ 1418.977902][T27883] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.6302'. [ 1419.536562][T27890] netlink: 'syz.3.6304': attribute type 3 has an invalid length. [ 1419.553982][T27890] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6304'. [ 1419.615218][T27633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1419.681605][T27633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1419.735421][T27633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1419.787239][T27896] netlink: 'syz.2.6305': attribute type 21 has an invalid length. [ 1419.860148][T27896] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6305'. [ 1420.060071][T27633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1420.558027][T27633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.659225][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1420.688803][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1420.725766][T27633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.795981][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1420.811525][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1420.844132][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.851424][ T8117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.907114][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1420.923305][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1420.968123][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1420.996725][T27925] FAULT_INJECTION: forcing a failure. [ 1420.996725][T27925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.009849][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.009992][ T8117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.011519][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1421.066864][T27925] CPU: 1 PID: 27925 Comm: syz.1.6313 Not tainted syzkaller #0 [ 1421.074451][T27925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1421.084569][T27925] Call Trace: [ 1421.087896][T27925] [ 1421.090873][T27925] dump_stack_lvl+0x188/0x24e [ 1421.095616][T27925] ? show_regs_print_info+0x12/0x12 [ 1421.100894][T27925] ? load_image+0x410/0x410 [ 1421.105469][T27925] ? __lock_acquire+0x7bd0/0x7bd0 [ 1421.110574][T27925] should_fail_ex+0x390/0x4c0 [ 1421.115327][T27925] _copy_from_user+0x2c/0x170 [ 1421.120082][T27925] __sys_bpf+0x2ea/0x780 [ 1421.124396][T27925] ? bpf_link_show_fdinfo+0x380/0x380 [ 1421.129851][T27925] ? lock_chain_count+0x20/0x20 [ 1421.134783][T27925] __x64_sys_bpf+0x78/0x90 [ 1421.139279][T27925] do_syscall_64+0x4c/0xa0 [ 1421.143756][T27925] ? clear_bhb_loop+0x60/0xb0 [ 1421.148489][T27925] ? clear_bhb_loop+0x60/0xb0 [ 1421.153250][T27925] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.159209][T27925] RIP: 0033:0x7f171559ce59 [ 1421.163665][T27925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.183313][T27925] RSP: 002b:00007f17164dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1421.191766][T27925] RAX: ffffffffffffffda RBX: 00007f1715815fa0 RCX: 00007f171559ce59 [ 1421.199766][T27925] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 000000000000001b [ 1421.207776][T27925] RBP: 00007f17164dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.215868][T27925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.223872][T27925] R13: 00007f1715816038 R14: 00007f1715815fa0 R15: 00007ffcdfc694c8 [ 1421.231900][T27925] [ 1421.309545][T27928] delete_channel: no stack [ 1421.347558][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1421.379046][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1421.396833][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1421.419381][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1421.533583][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1421.550546][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1421.587296][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1421.609391][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1421.633087][T27633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1421.664158][T27633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1421.795369][T27933] device bond_slave_1 entered promiscuous mode [ 1421.806290][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1421.829001][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1422.207371][T27942] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1422.265797][T27947] bridge0: port 3(batadv0) entered blocking state [ 1422.288029][T27947] bridge0: port 3(batadv0) entered disabled state [ 1422.326476][T27947] device batadv0 entered promiscuous mode [ 1422.350439][T27947] bridge0: port 3(batadv0) entered blocking state [ 1422.357103][T27947] bridge0: port 3(batadv0) entered forwarding state [ 1422.395170][T27945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6319'. [ 1422.810173][ T8120] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1422.820147][ T8120] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1423.036260][T27948] team0: Port device macvlan0 added [ 1423.079009][T27944] delete_channel: no stack [ 1423.182895][T27961] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6321'. [ 1423.232338][T27961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1423.291787][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1423.317064][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1423.344247][T27633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.360527][T27965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6330'. [ 1425.048902][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1425.068631][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1425.200559][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1425.218999][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1425.258524][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 1425.272087][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1425.355526][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1425.427463][T28011] validate_nla: 4 callbacks suppressed [ 1425.427482][T28011] netlink: 'syz.3.6329': attribute type 10 has an invalid length. [ 1425.685568][T28011] team0: Device wg1 is of different type [ 1425.813365][T27633] device veth0_vlan entered promiscuous mode [ 1425.969925][T28020] netlink: 'syz.0.6332': attribute type 21 has an invalid length. [ 1426.044622][T28020] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6332'. [ 1426.165477][T27633] device veth1_vlan entered promiscuous mode [ 1426.314961][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1426.359679][T23718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1426.402087][T27633] device veth0_macvtap entered promiscuous mode [ 1426.444660][T27633] device veth1_macvtap entered promiscuous mode [ 1426.769983][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.797671][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.817738][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.885083][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.920386][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.946458][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.948173][T28042] FAULT_INJECTION: forcing a failure. [ 1426.948173][T28042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.997754][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1427.030821][T28042] CPU: 1 PID: 28042 Comm: syz.1.6337 Not tainted syzkaller #0 [ 1427.038384][T28042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1427.044326][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.048469][T28042] Call Trace: [ 1427.048482][T28042] [ 1427.048492][T28042] dump_stack_lvl+0x188/0x24e [ 1427.048536][T28042] ? show_regs_print_info+0x12/0x12 [ 1427.048566][T28042] ? load_image+0x410/0x410 [ 1427.048599][T28042] ? __lock_acquire+0x7bd0/0x7bd0 [ 1427.084304][T28042] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1427.089976][T28042] should_fail_ex+0x390/0x4c0 [ 1427.094691][T28042] _copy_from_user+0x2c/0x170 [ 1427.099404][T28042] generic_map_delete_batch+0x2c1/0x6f0 [ 1427.104992][T28042] ? bpf_map_inc_not_zero+0x100/0x100 [ 1427.110406][T28042] ? __fdget+0x17c/0x200 [ 1427.114687][T28042] ? bpf_map_inc_not_zero+0x100/0x100 [ 1427.120102][T28042] bpf_map_do_batch+0x475/0x5f0 [ 1427.124998][T28042] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 1427.131361][T28042] __sys_bpf+0x6f7/0x780 [ 1427.135638][T28042] ? bpf_link_show_fdinfo+0x380/0x380 [ 1427.141057][T28042] ? lock_chain_count+0x20/0x20 [ 1427.145959][T28042] __x64_sys_bpf+0x78/0x90 [ 1427.150423][T28042] do_syscall_64+0x4c/0xa0 [ 1427.154873][T28042] ? clear_bhb_loop+0x60/0xb0 [ 1427.159581][T28042] ? clear_bhb_loop+0x60/0xb0 [ 1427.164296][T28042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.170229][T28042] RIP: 0033:0x7f171559ce59 [ 1427.174670][T28042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.194313][T28042] RSP: 002b:00007f17164dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1427.202768][T28042] RAX: ffffffffffffffda RBX: 00007f1715815fa0 RCX: 00007f171559ce59 [ 1427.210773][T28042] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 000000000000001b [ 1427.218775][T28042] RBP: 00007f17164dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.226780][T28042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.234785][T28042] R13: 00007f1715816038 R14: 00007f1715815fa0 R15: 00007ffcdfc694c8 [ 1427.242802][T28042] [ 1427.310154][T27633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1427.354369][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1427.365716][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1427.383480][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1427.429800][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1427.467351][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.497799][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.518348][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.537892][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.548364][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.607041][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.637497][T27633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.669099][T27633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.726122][T27633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1427.762726][T28045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1427.834166][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1427.853134][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1427.891340][T27633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.927778][T27633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.975954][T27633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.018315][T27633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.301772][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.308219][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.460483][ T8115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.497752][ T8115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.546350][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1428.639270][ T8176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.647213][ T8176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.661779][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1429.134334][T28083] netlink: 'syz.2.6345': attribute type 16 has an invalid length. [ 1429.173121][T28083] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6345'. [ 1430.343978][T28112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6352'. [ 1430.899224][T28126] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.6354'. [ 1432.191423][T28164] device syzkaller0 entered promiscuous mode [ 1432.571167][T28191] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6371'. [ 1434.405170][T28241] netlink: 'syz.2.6378': attribute type 2 has an invalid length. [ 1434.455963][T28241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6378'. [ 1434.491399][T28249] netlink: 'syz.0.6380': attribute type 3 has an invalid length. [ 1434.520684][T28249] netlink: 'syz.0.6380': attribute type 8 has an invalid length. [ 1434.538352][T28249] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.6380'. [ 1435.053253][T28259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.089698][T28259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.160335][T28259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.202997][T28259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.312565][T28259] bridge0: port 3(batadv0) entered disabled state [ 1435.519168][T28276] netlink: 'syz.2.6388': attribute type 29 has an invalid length. [ 1435.631043][T28259] device batadv0 left promiscuous mode [ 1435.673092][T28259] bridge0: port 3(batadv0) entered disabled state [ 1435.741463][T28276] netlink: 'syz.2.6388': attribute type 29 has an invalid length. [ 1435.849101][T28279] netlink: 'syz.2.6388': attribute type 29 has an invalid length. [ 1435.928328][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6390'. [ 1435.965463][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6390'. [ 1436.006912][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6390'. [ 1436.329680][T28295] netlink: 'syz.3.6393': attribute type 10 has an invalid length. [ 1436.359435][T28295] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6393'. [ 1437.103150][T28320] netlink: 'syz.3.6397': attribute type 21 has an invalid length. [ 1438.242420][T28357] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1438.495183][T28366] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1439.004704][T28380] device wlan1 entered promiscuous mode [ 1439.095168][ T4278] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 1440.603396][T28404] netlink: 111 bytes leftover after parsing attributes in process `syz.3.6423'. [ 1444.549413][T28446] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6434'. [ 1445.693926][T28456] netlink: 'syz.2.6436': attribute type 3 has an invalid length. [ 1445.717585][T28456] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1446.106529][T28463] netlink: 'syz.4.6439': attribute type 29 has an invalid length. [ 1446.140782][T28463] netlink: 'syz.4.6439': attribute type 29 has an invalid length. [ 1447.041784][T28503] netlink: 'syz.4.6451': attribute type 21 has an invalid length. [ 1447.440806][T28506] device syzkaller0 entered promiscuous mode [ 1450.867857][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 1451.986739][T28575] netlink: 'syz.4.6470': attribute type 10 has an invalid length. [ 1452.026540][T28575] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6470'. [ 1452.425336][T28598] device syzkaller0 entered promiscuous mode [ 1452.462919][T28598] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1452.607930][T28613] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1453.007919][T28638] netlink: 'syz.3.6485': attribute type 33 has an invalid length. [ 1453.031101][T28638] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6485'. [ 1453.055316][T28634] netlink: 'syz.0.6486': attribute type 1 has an invalid length. [ 1453.087293][T28634] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.6486'. [ 1453.142825][T28639] netlink: 751 bytes leftover after parsing attributes in process `syz.0.6486'. [ 1456.852139][T28648] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6488'. [ 1457.037567][T28661] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6493'. [ 1457.078833][T28661] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6493'. [ 1457.344112][T28671] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1457.444960][T28676] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6499'. [ 1457.748076][T28693] netlink: 'syz.0.6501': attribute type 3 has an invalid length. [ 1457.755940][T28693] netlink: 'syz.0.6501': attribute type 8 has an invalid length. [ 1457.768727][T28693] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.6501'. [ 1459.937123][T28704] netlink: 463 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1460.325060][T28724] bridge0: port 3(ip6gretap0) entered blocking state [ 1460.387239][T28724] bridge0: port 3(ip6gretap0) entered disabled state [ 1460.409972][T28724] device ip6gretap0 entered promiscuous mode [ 1460.417018][T28724] bridge0: port 3(ip6gretap0) entered blocking state [ 1460.425074][T28724] bridge0: port 3(ip6gretap0) entered forwarding state [ 1460.534659][T28732] netlink: 'syz.2.6512': attribute type 3 has an invalid length. [ 1460.570311][T28732] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6512'. [ 1461.136619][T28754] netlink: 'syz.0.6518': attribute type 2 has an invalid length. [ 1461.200177][T28757] netlink: 'syz.0.6518': attribute type 28 has an invalid length. [ 1461.242062][T28757] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6518'. [ 1461.322250][T28754] device 0 entered promiscuous mode [ 1464.465466][T28794] can: request_module (can-proto-0) failed. [ 1465.500243][T28827] netlink: 'syz.0.6537': attribute type 16 has an invalid length. [ 1465.568604][T28827] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1466.119258][T28841] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6539'. [ 1466.176870][T28841] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1469.793923][T28878] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1469.903701][T28901] netlink: 'syz.3.6556': attribute type 7 has an invalid length. [ 1470.300491][T28914] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6557'. [ 1470.461316][T28914] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1470.508810][T28914] CPU: 1 PID: 28914 Comm: syz.2.6557 Not tainted syzkaller #0 [ 1470.516380][T28914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1470.526527][T28914] Call Trace: [ 1470.529861][T28914] [ 1470.532838][T28914] dump_stack_lvl+0x188/0x24e [ 1470.537589][T28914] ? show_regs_print_info+0x12/0x12 [ 1470.542852][T28914] ? load_image+0x410/0x410 [ 1470.547439][T28914] ? kasan_save_alloc_info+0x7/0x20 [ 1470.552706][T28914] sysfs_warn_dup+0x8a/0xa0 [ 1470.557265][T28914] sysfs_do_create_link_sd+0xc0/0x110 [ 1470.562698][T28914] device_add+0x83b/0x1050 [ 1470.567161][T28914] wiphy_register+0x1d8b/0x2aa0 [ 1470.572083][T28914] ? cfg80211_event_work+0x40/0x40 [ 1470.577349][T28914] ? minstrel_ht_alloc+0x894/0xa20 [ 1470.582545][T28914] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1470.588683][T28914] ieee80211_register_hw+0x2d48/0x39f0 [ 1470.594197][T28914] ? ieee80211_register_hw+0xed1/0x39f0 [ 1470.599783][T28914] ? ieee80211_register_hw+0xed1/0x39f0 [ 1470.605382][T28914] ? ieee80211_tasklet_handler+0x20/0x20 [ 1470.611058][T28914] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1470.617003][T28914] ? __debug_object_init+0xed/0x440 [ 1470.622257][T28914] ? memset+0x1e/0x40 [ 1470.626276][T28914] ? __hrtimer_init+0x189/0x270 [ 1470.631175][T28914] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1470.636953][T28914] ? memcpy+0x3c/0x60 [ 1470.640989][T28914] hwsim_new_radio_nl+0xab7/0xc90 [ 1470.646091][T28914] genl_family_rcv_msg_doit+0x22f/0x350 [ 1470.651684][T28914] ? end_current_label_crit_section+0x170/0x170 [ 1470.657978][T28914] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1470.663931][T28914] ? bpf_lsm_capable+0x5/0x10 [ 1470.668661][T28914] ? security_capable+0x85/0xb0 [ 1470.673562][T28914] genl_rcv_msg+0x601/0x790 [ 1470.678115][T28914] ? genl_bind+0x360/0x360 [ 1470.682610][T28914] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1470.689000][T28914] netlink_rcv_skb+0x1ef/0x440 [ 1470.693870][T28914] ? genl_bind+0x360/0x360 [ 1470.698332][T28914] ? netlink_ack+0x1160/0x1160 [ 1470.703230][T28914] ? down_read+0x1a8/0x2d0 [ 1470.707702][T28914] genl_rcv+0x24/0x40 [ 1470.711721][T28914] netlink_unicast+0x7ad/0x920 [ 1470.716538][T28914] netlink_sendmsg+0x8ad/0xbd0 [ 1470.721699][T28914] ? netlink_getsockopt+0x550/0x550 [ 1470.726937][T28914] ? aa_sock_msg_perm+0x94/0x150 [ 1470.731918][T28914] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1470.737232][T28914] ? security_socket_sendmsg+0x7c/0xa0 [ 1470.742721][T28914] ? netlink_getsockopt+0x550/0x550 [ 1470.747959][T28914] ____sys_sendmsg+0x5ed/0x9a0 [ 1470.752764][T28914] ? __sys_sendmsg_sock+0x30/0x30 [ 1470.757827][T28914] ? __import_iovec+0x306/0x510 [ 1470.762721][T28914] ? import_iovec+0x6f/0xa0 [ 1470.767264][T28914] ___sys_sendmsg+0x2a2/0x360 [ 1470.772015][T28914] ? __sys_sendmsg+0x2a0/0x2a0 [ 1470.776825][T28914] ? irqentry_enter+0x33/0x50 [ 1470.781556][T28914] ? rcu_is_watching+0x11/0xa0 [ 1470.786394][T28914] __se_sys_sendmsg+0x1c3/0x2b0 [ 1470.791282][T28914] ? perf_trace_preemptirq_template+0x268/0x320 [ 1470.797568][T28914] ? __x64_sys_sendmsg+0x80/0x80 [ 1470.802560][T28914] ? lockdep_hardirqs_on+0x94/0x140 [ 1470.807801][T28914] do_syscall_64+0x4c/0xa0 [ 1470.812252][T28914] ? clear_bhb_loop+0x60/0xb0 [ 1470.816962][T28914] ? clear_bhb_loop+0x60/0xb0 [ 1470.821678][T28914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.827619][T28914] RIP: 0033:0x7f3b98d9ce59 [ 1470.832085][T28914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.851758][T28914] RSP: 002b:00007f3b99c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.860209][T28914] RAX: ffffffffffffffda RBX: 00007f3b99016090 RCX: 00007f3b98d9ce59 [ 1470.868243][T28914] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1470.876249][T28914] RBP: 00007f3b98e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1470.884262][T28914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.892266][T28914] R13: 00007f3b99016128 R14: 00007f3b99016090 R15: 00007ffd81909878 [ 1470.900292][T28914] [ 1471.348055][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 1471.767204][T28947] netlink: 'syz.2.6566': attribute type 21 has an invalid length. [ 1472.085827][T28958] tun0: tun_chr_ioctl cmd 2147767507 [ 1472.541683][T28973] netlink: 'syz.0.6572': attribute type 41 has an invalid length. [ 1472.822731][T28982] netlink: 'syz.2.6576': attribute type 25 has an invalid length. [ 1473.083808][T28988] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1473.101936][T28997] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6581'. [ 1473.176160][T28988] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1473.528698][T29018] netlink: 'syz.1.6584': attribute type 2 has an invalid length. [ 1473.547833][T29018] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6584'. [ 1473.851061][T29029] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6589'. [ 1475.787337][T29066] €Â0: renamed from pim6reg1 [ 1476.210151][T29082] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.6603'. [ 1476.367564][T29073] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6601'. [ 1476.657332][T29073] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1476.666547][T29073] CPU: 0 PID: 29073 Comm: syz.1.6601 Not tainted syzkaller #0 [ 1476.674094][T29073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1476.684213][T29073] Call Trace: [ 1476.687534][T29073] [ 1476.690501][T29073] dump_stack_lvl+0x188/0x24e [ 1476.695232][T29073] ? show_regs_print_info+0x12/0x12 [ 1476.700467][T29073] ? load_image+0x410/0x410 [ 1476.705033][T29073] sysfs_warn_dup+0x8a/0xa0 [ 1476.709575][T29073] sysfs_do_create_link_sd+0xc0/0x110 [ 1476.715005][T29073] device_add+0x83b/0x1050 [ 1476.719464][T29073] wiphy_register+0x1d8b/0x2aa0 [ 1476.724369][T29073] ? cfg80211_event_work+0x40/0x40 [ 1476.729513][T29073] ? minstrel_ht_alloc+0x894/0xa20 [ 1476.734666][T29073] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1476.740773][T29073] ieee80211_register_hw+0x2d48/0x39f0 [ 1476.746273][T29073] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1476.752483][T29073] ? ieee80211_register_hw+0xed1/0x39f0 [ 1476.758060][T29073] ? ieee80211_register_hw+0xed1/0x39f0 [ 1476.763648][T29073] ? ieee80211_tasklet_handler+0x20/0x20 [ 1476.769362][T29073] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1476.775304][T29073] ? __debug_object_init+0xed/0x440 [ 1476.780546][T29073] ? memset+0x1e/0x40 [ 1476.784562][T29073] ? __hrtimer_init+0x189/0x270 [ 1476.789453][T29073] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1476.795221][T29073] ? memcpy+0x3c/0x60 [ 1476.799240][T29073] hwsim_new_radio_nl+0xab7/0xc90 [ 1476.804309][T29073] genl_family_rcv_msg_doit+0x22f/0x350 [ 1476.809895][T29073] ? end_current_label_crit_section+0x170/0x170 [ 1476.816178][T29073] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1476.822125][T29073] ? bpf_lsm_capable+0x5/0x10 [ 1476.826840][T29073] ? security_capable+0x85/0xb0 [ 1476.831727][T29073] genl_rcv_msg+0x601/0x790 [ 1476.836272][T29073] ? genl_bind+0x360/0x360 [ 1476.840728][T29073] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1476.847105][T29073] ? netlink_rcv_skb+0x1ce/0x440 [ 1476.852079][T29073] netlink_rcv_skb+0x1ef/0x440 [ 1476.856874][T29073] ? genl_bind+0x360/0x360 [ 1476.861322][T29073] ? netlink_ack+0x1160/0x1160 [ 1476.866124][T29073] ? down_read+0x1a8/0x2d0 [ 1476.870594][T29073] genl_rcv+0x24/0x40 [ 1476.874620][T29073] netlink_unicast+0x7ad/0x920 [ 1476.879426][T29073] netlink_sendmsg+0x8ad/0xbd0 [ 1476.884238][T29073] ? netlink_getsockopt+0x550/0x550 [ 1476.889472][T29073] ? aa_sock_msg_perm+0x94/0x150 [ 1476.894448][T29073] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1476.899771][T29073] ? security_socket_sendmsg+0x7c/0xa0 [ 1476.905260][T29073] ? netlink_getsockopt+0x550/0x550 [ 1476.910499][T29073] ____sys_sendmsg+0x5ed/0x9a0 [ 1476.915325][T29073] ? __sys_sendmsg_sock+0x30/0x30 [ 1476.920403][T29073] ? __import_iovec+0x306/0x510 [ 1476.925312][T29073] ? import_iovec+0x6f/0xa0 [ 1476.929848][T29073] ___sys_sendmsg+0x2a2/0x360 [ 1476.934567][T29073] ? migrate_enable+0x148/0x220 [ 1476.939509][T29073] ? __sys_sendmsg+0x2a0/0x2a0 [ 1476.944351][T29073] __se_sys_sendmsg+0x1c3/0x2b0 [ 1476.949317][T29073] ? __x64_sys_sendmsg+0x80/0x80 [ 1476.954303][T29073] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1476.960244][T29073] do_syscall_64+0x4c/0xa0 [ 1476.964695][T29073] ? clear_bhb_loop+0x60/0xb0 [ 1476.969400][T29073] ? clear_bhb_loop+0x60/0xb0 [ 1476.974123][T29073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1476.980067][T29073] RIP: 0033:0x7f171559ce59 [ 1476.984516][T29073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.004353][T29073] RSP: 002b:00007f17164bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.012810][T29073] RAX: ffffffffffffffda RBX: 00007f1715816090 RCX: 00007f171559ce59 [ 1477.020824][T29073] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1477.028833][T29073] RBP: 00007f1715632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1477.036840][T29073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.044850][T29073] R13: 00007f1715816128 R14: 00007f1715816090 R15: 00007ffcdfc694c8 [ 1477.052880][T29073] [ 1477.186888][T29097] netlink: 'syz.4.6606': attribute type 39 has an invalid length. [ 1477.672612][T29112] netlink: 'syz.2.6609': attribute type 10 has an invalid length. [ 1477.693472][T29112] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6609'. [ 1477.829105][T29116] netlink: 'syz.3.6611': attribute type 3 has an invalid length. [ 1477.877731][T29116] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6611'. [ 1477.890888][T29110] device syzkaller0 entered promiscuous mode [ 1477.937351][T29121] netlink: 'syz.4.6612': attribute type 3 has an invalid length. [ 1477.959245][T29121] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.6612'. [ 1480.949267][T29126] netlink: 'syz.1.6614': attribute type 7 has an invalid length. [ 1480.957113][T29126] netlink: 'syz.1.6614': attribute type 6 has an invalid length. [ 1480.965449][T29123] device vcan0 entered promiscuous mode [ 1480.971790][T29123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1480.992680][T29137] device vcan0 entered promiscuous mode [ 1481.018680][T29137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1481.334085][T29149] tap0: tun_chr_ioctl cmd 1074025677 [ 1481.355485][T29149] tap0: linktype set to 776 [ 1482.060429][T29175] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1482.202033][T29175] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1482.981227][T29214] netlink: 'syz.3.6632': attribute type 21 has an invalid length. [ 1483.013958][T29214] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.6632'. [ 1483.038699][T29218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6636'. [ 1483.385371][T29227] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6638'. [ 1483.462295][T29233] netlink: 'syz.2.6639': attribute type 10 has an invalid length. [ 1484.230185][T29254] netlink: 'syz.2.6647': attribute type 3 has an invalid length. [ 1484.279060][T29254] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6647'. [ 1484.430005][T29262] netlink: 'syz.3.6648': attribute type 21 has an invalid length. [ 1485.788568][T29303] device wlan1 entered promiscuous mode [ 1489.099873][T29338] netlink: 'syz.1.6667': attribute type 10 has an invalid length. [ 1489.144491][T29338] team0: Device ipvlan1 failed to register rx_handler [ 1489.402643][ T4278] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 1489.539272][T29354] netlink: 'syz.0.6671': attribute type 4 has an invalid length. [ 1489.676957][T29357] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1489.723803][T29357] bridge_slave_1: default FDB implementation only supports local addresses [ 1489.741682][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.748179][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.939176][T29370] netlink: 'syz.0.6678': attribute type 27 has an invalid length. [ 1491.430607][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 1491.600771][T29418] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6693'. [ 1492.061927][T29427] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.6696'. [ 1492.200626][T29428] device syzkaller0 entered promiscuous mode [ 1492.703784][T29448] netlink: 'syz.0.6702': attribute type 39 has an invalid length. [ 1493.035815][T29454] netlink: 'syz.0.6704': attribute type 3 has an invalid length. [ 1493.047043][T29454] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1493.497534][T29467] netlink: 'syz.3.6708': attribute type 16 has an invalid length. [ 1493.507925][T29467] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6708'. [ 1494.733963][T29504] netlink: 'syz.2.6722': attribute type 10 has an invalid length. [ 1494.965665][T29514] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.6724'. [ 1495.008417][T29517] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6725'. [ 1495.057157][T29516] device wg2 entered promiscuous mode [ 1495.228475][T29520] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.6726'. [ 1495.854580][T29536] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1495.982134][T29537] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6730'. [ 1496.594349][T29546] tap0: tun_chr_ioctl cmd 1074025677 [ 1496.602527][T29546] tap0: linktype set to 774 [ 1499.039298][T29550] netlink: 'syz.3.6737': attribute type 25 has an invalid length. [ 1499.246232][T29563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1499.778601][T29563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1499.871902][T29556] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1500.783794][T29622] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1500.884507][T29623] netlink: 'syz.1.6752': attribute type 3 has an invalid length. [ 1500.902762][T29623] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1501.093977][T29606] device syzkaller0 entered promiscuous mode [ 1501.138474][T29632] netlink: 'syz.2.6755': attribute type 21 has an invalid length. [ 1501.169069][T29632] netlink: 'syz.2.6755': attribute type 2 has an invalid length. [ 1502.067843][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 1505.175124][T29653] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1505.184655][T29655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6761'. [ 1505.207838][T29659] netlink: 'syz.4.6761': attribute type 12 has an invalid length. [ 1505.215757][T29659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6761'. [ 1505.258732][T29663] netlink: 'syz.4.6761': attribute type 39 has an invalid length. [ 1505.414975][T29667] netlink: 'syz.2.6762': attribute type 2 has an invalid length. [ 1505.438064][T29667] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6762'. [ 1505.464075][T29673] netlink: 'syz.3.6763': attribute type 5 has an invalid length. [ 1505.518759][T29675] netlink: 'syz.0.6765': attribute type 3 has an invalid length. [ 1505.548338][T29675] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6765'. [ 1505.600355][T29679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6765'. [ 1505.628490][T29675] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6765'. [ 1505.660631][T29675] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1506.084674][T29703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6770'. [ 1506.586328][T29726] delete_channel: no stack [ 1506.595501][T29724] netlink: 'syz.1.6775': attribute type 3 has an invalid length. [ 1506.642750][T29726] delete_channel: no stack [ 1506.651906][T29724] netlink: 'syz.1.6775': attribute type 1 has an invalid length. [ 1506.684198][T29724] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.6775'. [ 1506.836293][T29740] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1506.867429][T29740] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1506.984225][T29744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6782'. [ 1507.040010][T29744] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6782'. [ 1507.083594][T29744] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6782'. [ 1507.129595][T29744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1508.032578][T29744] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6782'. [ 1508.061855][T29744] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1508.079785][T29744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1510.119642][T29750] device veth1_macvtap left promiscuous mode [ 1510.878558][T29801] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1511.302843][T29785] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1511.364125][T29785] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1511.373746][T29785] CPU: 0 PID: 29785 Comm: syz.2.6794 Not tainted syzkaller #0 [ 1511.381306][T29785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1511.391409][T29785] Call Trace: [ 1511.394730][T29785] [ 1511.397701][T29785] dump_stack_lvl+0x188/0x24e [ 1511.402442][T29785] ? show_regs_print_info+0x12/0x12 [ 1511.407731][T29785] ? load_image+0x410/0x410 [ 1511.412313][T29785] sysfs_warn_dup+0x8a/0xa0 [ 1511.416883][T29785] sysfs_do_create_link_sd+0xc0/0x110 [ 1511.422323][T29785] device_add+0x83b/0x1050 [ 1511.426805][T29785] wiphy_register+0x1d8b/0x2aa0 [ 1511.431744][T29785] ? cfg80211_event_work+0x40/0x40 [ 1511.436914][T29785] ? minstrel_ht_alloc+0x894/0xa20 [ 1511.442097][T29785] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1511.448246][T29785] ieee80211_register_hw+0x2d48/0x39f0 [ 1511.453780][T29785] ? ieee80211_register_hw+0xed1/0x39f0 [ 1511.459406][T29785] ? ieee80211_register_hw+0xed1/0x39f0 [ 1511.465032][T29785] ? ieee80211_tasklet_handler+0x20/0x20 [ 1511.470726][T29785] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1511.476684][T29785] ? __debug_object_init+0xed/0x440 [ 1511.481948][T29785] ? memset+0x1e/0x40 [ 1511.486000][T29785] ? __hrtimer_init+0x189/0x270 [ 1511.490931][T29785] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1511.496733][T29785] ? memcpy+0x3c/0x60 [ 1511.500781][T29785] hwsim_new_radio_nl+0xab7/0xc90 [ 1511.505886][T29785] genl_family_rcv_msg_doit+0x22f/0x350 [ 1511.511499][T29785] ? end_current_label_crit_section+0x170/0x170 [ 1511.517807][T29785] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1511.523778][T29785] ? bpf_lsm_capable+0x5/0x10 [ 1511.528522][T29785] ? security_capable+0x85/0xb0 [ 1511.533459][T29785] genl_rcv_msg+0x601/0x790 [ 1511.538036][T29785] ? genl_bind+0x360/0x360 [ 1511.542514][T29785] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1511.548918][T29785] netlink_rcv_skb+0x1ef/0x440 [ 1511.553737][T29785] ? genl_bind+0x360/0x360 [ 1511.558215][T29785] ? netlink_ack+0x1160/0x1160 [ 1511.563051][T29785] ? down_read+0x1a8/0x2d0 [ 1511.567530][T29785] genl_rcv+0x24/0x40 [ 1511.571565][T29785] netlink_unicast+0x7ad/0x920 [ 1511.576390][T29785] netlink_sendmsg+0x8ad/0xbd0 [ 1511.581219][T29785] ? netlink_getsockopt+0x550/0x550 [ 1511.586485][T29785] ? aa_sock_msg_perm+0x94/0x150 [ 1511.591518][T29785] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1511.596858][T29785] ? security_socket_sendmsg+0x7c/0xa0 [ 1511.602368][T29785] ? netlink_getsockopt+0x550/0x550 [ 1511.607618][T29785] ____sys_sendmsg+0x5ed/0x9a0 [ 1511.612448][T29785] ? __sys_sendmsg_sock+0x30/0x30 [ 1511.617527][T29785] ? __import_iovec+0x306/0x510 [ 1511.622455][T29785] ? import_iovec+0x6f/0xa0 [ 1511.627023][T29785] ___sys_sendmsg+0x2a2/0x360 [ 1511.631764][T29785] ? __sys_sendmsg+0x2a0/0x2a0 [ 1511.636642][T29785] __se_sys_sendmsg+0x1c3/0x2b0 [ 1511.641545][T29785] ? ct_nmi_exit+0x145/0x1c0 [ 1511.646196][T29785] ? __x64_sys_sendmsg+0x80/0x80 [ 1511.651215][T29785] ? lockdep_hardirqs_on+0x94/0x140 [ 1511.656482][T29785] do_syscall_64+0x4c/0xa0 [ 1511.660951][T29785] ? clear_bhb_loop+0x60/0xb0 [ 1511.665673][T29785] ? clear_bhb_loop+0x60/0xb0 [ 1511.670407][T29785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1511.676367][T29785] RIP: 0033:0x7f3b98d9ce59 [ 1511.680844][T29785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.700504][T29785] RSP: 002b:00007f3b99c90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1511.708982][T29785] RAX: ffffffffffffffda RBX: 00007f3b99015fa0 RCX: 00007f3b98d9ce59 [ 1511.717007][T29785] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1511.725034][T29785] RBP: 00007f3b98e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1511.733063][T29785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.741090][T29785] R13: 00007f3b99016038 R14: 00007f3b99015fa0 R15: 00007ffd81909878 [ 1511.749155][T29785] [ 1512.326845][T29820] netlink: 'syz.3.6802': attribute type 21 has an invalid length. [ 1512.467788][T29823] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6801'. [ 1512.709903][T29826] IPv6: Can't replace route, no match found [ 1513.023747][T29828] netlink: 'syz.3.6804': attribute type 13 has an invalid length. [ 1513.261428][T29828] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6804'. [ 1513.427125][T29828] syz_tun: refused to change device tx_queue_len [ 1513.559643][T29828] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1513.588393][T29826] netlink: 'syz.3.6804': attribute type 10 has an invalid length. [ 1513.866394][T29826] team0: Port device netdevsim0 added [ 1513.916110][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6806'. [ 1514.049275][T29836] netlink: 'syz.4.6806': attribute type 3 has an invalid length. [ 1514.117790][T29836] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6806'. [ 1514.455349][T29846] wlan1: mtu greater than device maximum [ 1514.555821][T29846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.658475][T29846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.773333][T29846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.857225][T29846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.913859][T29846] batman_adv: batadv0: Interface deactivated: vlan1 [ 1514.921780][T29851] netlink: 'syz.3.6808': attribute type 1 has an invalid length. [ 1514.937173][T29846] batman_adv: batadv0: Removing interface: vlan1 [ 1514.945899][T29851] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1515.082120][T29856] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1515.202344][T29859] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6811'. [ 1515.426119][T29871] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6813'. [ 1515.436347][T29871] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1515.575312][T29875] netlink: 'syz.3.6815': attribute type 2 has an invalid length. [ 1515.591163][T29875] netlink: 119 bytes leftover after parsing attributes in process `syz.3.6815'. [ 1515.624727][T29875] netlink: 'syz.3.6815': attribute type 10 has an invalid length. [ 1515.830504][T29877] netlink: 'syz.2.6816': attribute type 2 has an invalid length. [ 1516.534916][T29895] netlink: 'syz.4.6819': attribute type 21 has an invalid length. [ 1516.557697][T29895] __nla_validate_parse: 3 callbacks suppressed [ 1516.557716][T29895] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1516.604891][T29896] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1516.875076][T29907] netlink: 'syz.4.6824': attribute type 10 has an invalid length. [ 1516.889226][T29907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.896860][T29907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.962844][T29907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.970457][T29907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.980299][T29907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.987686][T29907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.036660][T29907] team0: Port device bridge0 added [ 1517.354530][T29929] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1517.729309][T29933] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6827'. [ 1517.835374][T29933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1517.978618][T29933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1518.291540][T29945] netlink: 'syz.0.6835': attribute type 5 has an invalid length. [ 1518.331527][T29947] syz.0.6835[29947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1518.331641][T29947] syz.0.6835[29947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1518.486835][T29951] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.6834'. [ 1518.599271][T29956] netlink: 'syz.1.6837': attribute type 3 has an invalid length. [ 1518.619139][T29956] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1518.690489][T29959] netlink: 'syz.1.6837': attribute type 21 has an invalid length. [ 1518.734838][T29959] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1518.794870][T29959] netlink: 'syz.1.6837': attribute type 4 has an invalid length. [ 1518.852069][T29959] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1518.946579][T29964] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1519.013371][T29964] syzkaller1: linktype set to 773 [ 1519.074263][T29963] netlink: 'syz.0.6838': attribute type 3 has an invalid length. [ 1519.106410][T29963] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6838'. [ 1519.823177][T29984] delete_channel: no stack [ 1519.859505][T29984] delete_channel: no stack [ 1519.975359][T29981] sctp: [Deprecated]: syz.1.6845 (pid 29981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1519.975359][T29981] Use struct sctp_sack_info instead [ 1520.166944][T30000] tun0: tun_chr_ioctl cmd 1074025675 [ 1520.189863][T30000] tun0: persist enabled [ 1520.200629][T29998] tun0: tun_chr_ioctl cmd 1074025675 [ 1520.206115][T29998] tun0: persist enabled [ 1520.276053][T30006] netlink: 'syz.2.6851': attribute type 41 has an invalid length. [ 1520.353536][T30003] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6850'. [ 1520.460593][ T4278] ------------[ cut here ]------------ [ 1520.466737][ T4278] WARNING: CPU: 1 PID: 4278 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 1520.476717][ T4278] Modules linked in: [ 1520.480764][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1520.488517][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1520.498679][ T4278] Workqueue: hci4 hci_conn_timeout [ 1520.503888][ T4278] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1520.509671][ T4278] Code: 20 8e e8 54 86 a0 f8 48 8b 35 15 4d ed 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 5f 21 f8 e8 71 5e 4f f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1520.529400][ T4278] RSP: 0018:ffffc90004207c08 EFLAGS: 00010293 [ 1520.535546][ T4278] RAX: ffffffff8932c29f RBX: ffff88807bac8330 RCX: ffff88802f58bc00 [ 1520.543654][ T4278] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1520.551745][ T4278] RBP: 00000000ffffffff R08: ffff88807bac8013 R09: 1ffff1100f759002 [ 1520.559837][ T4278] R10: dffffc0000000000 R11: ffffed100f759003 R12: ffffffff81557724 [ 1520.567946][ T4278] R13: dffffc0000000000 R14: ffff88807bac8000 R15: ffff88807bac8010 [ 1520.575996][ T4278] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1520.585050][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1520.591741][ T4278] CR2: 000000110c34c453 CR3: 0000000073fd0000 CR4: 00000000003506e0 [ 1520.600020][ T4278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1520.608262][ T4278] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1520.616309][ T4278] Call Trace: [ 1520.619725][ T4278] [ 1520.622712][ T4278] ? process_one_work+0x7b4/0x1160 [ 1520.627972][ T4278] process_one_work+0x8ab/0x1160 [ 1520.633012][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1520.638767][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1520.643889][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1520.649050][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1520.654679][ T4278] ? wq_worker_running+0x97/0x190 [ 1520.659838][ T4278] worker_thread+0xaf5/0x12a0 [ 1520.664656][ T4278] kthread+0x29d/0x330 [ 1520.668840][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1520.673945][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1520.678660][ T4278] ret_from_fork+0x1f/0x30 [ 1520.683193][ T4278] [ 1520.686298][ T4278] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1520.693614][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1520.701189][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1520.711294][ T4278] Workqueue: hci4 hci_conn_timeout [ 1520.716454][ T4278] Call Trace: [ 1520.719784][ T4278] [ 1520.722833][ T4278] dump_stack_lvl+0x188/0x24e [ 1520.727562][ T4278] ? memcpy+0x3c/0x60 [ 1520.731585][ T4278] ? show_regs_print_info+0x12/0x12 [ 1520.737022][ T4278] ? load_image+0x410/0x410 [ 1520.741610][ T4278] panic+0x2d3/0x710 [ 1520.745585][ T4278] ? bpf_jit_dump+0xd0/0xd0 [ 1520.750147][ T4278] ? __warn+0x2e0/0x4f0 [ 1520.754347][ T4278] __warn+0x2f8/0x4f0 [ 1520.758364][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1520.763482][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1520.768580][ T4278] report_bug+0x2ba/0x4f0 [ 1520.772989][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1520.778060][ T4278] handle_bug+0x3a/0x70 [ 1520.782252][ T4278] exc_invalid_op+0x16/0x40 [ 1520.786826][ T4278] asm_exc_invalid_op+0x16/0x20 [ 1520.791737][ T4278] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1520.797562][ T4278] Code: 20 8e e8 54 86 a0 f8 48 8b 35 15 4d ed 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 06 5f 21 f8 e8 71 5e 4f f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1520.817231][ T4278] RSP: 0018:ffffc90004207c08 EFLAGS: 00010293 [ 1520.823394][ T4278] RAX: ffffffff8932c29f RBX: ffff88807bac8330 RCX: ffff88802f58bc00 [ 1520.831431][ T4278] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1520.839452][ T4278] RBP: 00000000ffffffff R08: ffff88807bac8013 R09: 1ffff1100f759002 [ 1520.847558][ T4278] R10: dffffc0000000000 R11: ffffed100f759003 R12: ffffffff81557724 [ 1520.855758][ T4278] R13: dffffc0000000000 R14: ffff88807bac8000 R15: ffff88807bac8010 [ 1520.863910][ T4278] ? process_one_work+0x7b4/0x1160 [ 1520.869073][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1520.874182][ T4278] ? hci_conn_timeout+0x24f/0x450 [ 1520.879298][ T4278] ? process_one_work+0x7b4/0x1160 [ 1520.884459][ T4278] process_one_work+0x8ab/0x1160 [ 1520.889471][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 1520.895174][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 1520.900294][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1520.905366][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1520.910977][ T4278] ? wq_worker_running+0x97/0x190 [ 1520.916085][ T4278] worker_thread+0xaf5/0x12a0 [ 1520.920831][ T4278] kthread+0x29d/0x330 [ 1520.924963][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 1520.930022][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 1520.934671][ T4278] ret_from_fork+0x1f/0x30 [ 1520.939138][ T4278] [ 1520.942774][ T4278] Kernel Offset: disabled [ 1520.947204][ T4278] Rebooting in 86400 seconds..