last executing test programs: 9m52.245949088s ago: executing program 3 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 9m50.819611883s ago: executing program 3 (id=156): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 9m50.46843473s ago: executing program 3 (id=161): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000080000000000000009000000850000001d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m50.236417978s ago: executing program 3 (id=164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000063000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m50.162233696s ago: executing program 3 (id=165): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc4201100, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) 9m49.63235686s ago: executing program 3 (id=170): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m34.452223737s ago: executing program 32 (id=170): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 21.900195854s ago: executing program 1 (id=2257): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x1, 0x8a, 0x4, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000700000000000000000000950000000000000067b458c68b14f058508b4c6af2d778bdd7b46f9a86a770"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x6}, 0x0) sendmsg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x180}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f00000002c0)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 21.48899247s ago: executing program 1 (id=2258): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) r1 = syz_clone(0x14000000, 0x0, 0x2b, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xec, 0x0, 0x5, 0x1, 0x0, 0x1, 0x659e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x800}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x1d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x34, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x7, 0xffffff81, 0x7, 0x9, 0x6, 0x7, 0x0, 0x13, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) close(r2) socket$kcm(0x2, 0x7, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="140000002a000b0f5ddf00"/20, 0x14}, {&(0x7f0000000100)="160628706c8ac8302adc1df89021fe5793bdee46574ac0dc73f3bc9768ddf6ad5b956b592a75", 0x26}, {&(0x7f0000000280)="361821115e14f86a63bdc82263fd025352b745c5ccb9b02f4d23c84f4d0533b4a85028bf5f6a28b9c85deb209dabc7fc9b614415c1a4116328902eb5066272b1644dc7dbc6dcbf59f83ab6e1b197a0f974047367c76aaa4de011f7bd56531a4701cef33e77e9dbeacff1e259793baae10c0f33f9295f22e893f8df29aeb213854669f2d449397b3c0e79e421ee2b8f870af0922ec6f3630c23017e5691652712383300c6c3ee12b61148510eab6a18fb8263f52bb535f1a6e5d695672b2611f099b9452ffcc5a5b97b327cb53e7e3346a13df96a4d928ab5a280d71979d143dfa32bf4ec66cc28", 0xe7}], 0x3}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="62042700180f01000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x10b}, {&(0x7f0000000480)="8eefedd1a9f7b60541fce923f584d6024263fb5df6219db166dd03702720153500359a0f63da5eb51e0e3b2396bd0dad6e336fedaed6d76cb3757e0b3abd7e5e71f570dd8e1d07f5dc66924e40a252203517fb66257809d53fb6e11103369c65ad619beb1be4a15fb213f41503abc543aee819016b73cc911c12ffd82b84b83618f78f309d088b33dab7dc40d2b06479efabad4695d3a100c48c3193c273b3e8cc0464cb59986bed8dd8575424435b36dd96e44889ce908f6a7c13de66ceeddf2192974f37b00b7b7f8b2f8ab295", 0xce}, {&(0x7f0000000580)="0eeb7647ee1336b753440a5a8272c74cf8608336c81e0c2157150ce34235cb7d212342705d96fcc035e313b3ca35bcfdcce2332073b4bdf4a417a9a5fcd0e7d598b2a16cc214224e4e8761d635fd331abc1aaedfbdde64adfb6342d9b5449051d6b39517b0970cffc64148089ee99ecdc75ab1d05c7dd7d77fdd135f01fdae76310c4f3cd3a724b1e907ba685c4f5a60a43e7cd1b32e00017de4c7aaccaf80e11b1ff4da1f8fcb8a377c9986c0b67be9e85d0f7fc8a8998198ef488d5ae7351db452ea673632ca7a410b186463f687b278329fdbd82e6f271f50fec34bf4dcd478970e868c7ab79e1e2181ea8ac5e0", 0xef}, {&(0x7f00000013c0)="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", 0xbc8}], 0x5}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64=r5], 0x0, 0x2}, 0x94) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x22, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0a000000050000000200000009000000ff685aff", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fd1f00000000000000000000000000000000000027b3636ca5a640bf660cdac2b946647ec7c11c946aa603fa53cb044955116b5b201ca8233c12a5bd5516529d62f2e8107c478ad1a252e642b8cfc1f3064617263ae3b6af6a40133e67130aeef9e1c518bdf22794d6608736ca998ff73cf170728f602ca15ccc517fc860bbb28be76ac37fbc152c543e8917b006db8b3e6bb94a86f9ba4e2486db8e204d447da2d49179b9b3583698c7b2f2cd877ea16559d59e9099b1d1afa71d93ffb02244704161a08e51ece7ddb53a6bb42c"], 0x50) 18.979739332s ago: executing program 1 (id=2262): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb012b07a0153bea3ad0f55689bf7c5af28d0018f6ff0000000000000000005183633c8ed2fd876c40d9f8e3adf209cb00"/59], 0x0, 0x1c, 0x0, 0x0, 0x7ff}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4030}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000050000000300"/28], 0x50) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x4) r3 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x1, 0x4, 0x9, 0x0, 0xf604, 0x3a02, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf44, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x44, 0x400, 0x6, 0x6, 0x5, 0x7, 0x80, 0x0, 0xbe1, 0x0, 0x9}, r3, 0x3, r1, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b400000000eb00000f1000000000000061020000000000009500050000000000929b569e5b468b4c53db3f7ac9bc09236ced48406ba73fa5a110a5121c838a6c38dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43bec5ef0727bfa5532d5300"/111, @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000940), 0x10}, 0x94) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002d00000000100100000c0000002900000000000000"], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="110000001e00", 0x6}, {&(0x7f0000000140)="78cafb73", 0x4}], 0x2}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) setsockopt$sock_attach_bpf(r8, 0x84, 0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x20040000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000039e00"], 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) 18.321473114s ago: executing program 1 (id=2265): r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x201842, 0x2f, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x2e]}}, 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r6 = socket$kcm(0xa, 0x2, 0x88) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) setsockopt$sock_attach_bpf(r6, 0x88, 0xa, &(0x7f00000002c0)=r8, 0x4) sendmsg$sock(r6, &(0x7f0000000b80)={&(0x7f0000000380)=@in6={0xa, 0x4e02, 0x2, @loopback, 0x7f}, 0x80, 0x0}, 0x40001) 17.863936682s ago: executing program 1 (id=2267): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x2d, 0x0, 0x88) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0xcfa4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000368060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r6, 0x0, 0xfe33) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0xb}, 0x4010, 0x0, 0x0, 0x4, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="5c00000014006b02c84e21000af32c6e1b060171955e370044000100fe800e00000000000033df090e8497b1ed90d3d395bd5f6ffe5aa677b175b169e94460bc24f65ee2f3eec8ffff00003b48cfcb3ea36ca0441f1f568711acac3204d5674f3c7b141f4ed3f3a8a53af6765121c156a18c8a5b299209e301313eb573ddd4f1972fc204c6a920f08d027de803930530a20663318b4d3a73a5c270173ac65f1cc3254f7fbf2b2e8c161324980285fc9b80e91fd5a4a7d944dd085e0b62e2449859f8bd4e0555a84a7c35e176773234ea1d1fe772ad48ff0dd6ad3e4ab2faef86d5102adca4bcecd54ee439028c6025d373654cf99df397040cacb4e7c988669f074ce7a4ec7e8a9e17726f9b9a5fca93b40b87def06846862471962835f675e74a8e6ce580c190b87fceb55adf4668b78c61947d8cd458a800"/326, 0x146}, {&(0x7f0000000200)="9c9b71fd54ded7a6af809521884b1b75a8febf59895e0a2606ffa1fa6e70d2ab0823e53b5209be698dfa725442806547eb619c2a5b864966ff9122ef0e07935b5452ab1ca8e9c170f4c9ef586c999f4f188fa01dc8f5ec5afad55e2a191d4583d7397c506caeb92bb02b027d4842c3d88a1c251ad1e70280f7036525de249081ec1f900000a1daaedcce81bf79ffce573d65165dbeff841943a6c823d92415353103d32076458392e624e371d7de6ca844eb0d37b5", 0xb5}, {&(0x7f0000000580)="a0fdc8978e327ada0f47e857bd696012cfcc87c37f9aa501cb48156269207c229ae6b63346843c969d64c14cfa274f75bc47bedf5e1c30f7c5e5ca6a78602961980919945264c9cef55ea572fcc499a01bbb9bf66c2d16e063c0c8ffab88a5c643b5eec42f187b25d015ee9ff4f57442739c7f57d4dab7758aaaf476595ac5ab8c663771ee2d03b1a4a3e83989d8f60ad69864d8d4ef0b3dd3e0b4803377847b985dced4466d9b999a9e33f0fa2fa14adb3a7305a4862cc738e39469eede71126358fbc94db3042439e5cf555a56ec432cf52afaf905d181c849a410dc82a33b1d53474e29394d0f662f1faeff238fc9b947567e55dcf35a37", 0x125}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x80081) 17.422075783s ago: executing program 1 (id=2272): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r3, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0x67, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 6.320233969s ago: executing program 2 (id=2292): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x840) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000806}, 0x0, 0x2, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x40000000000000) getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe"], 0x0}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) close(r1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) 3.495789525s ago: executing program 4 (id=2298): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6003b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) 3.390817526s ago: executing program 0 (id=2299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="184744000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async, rerun: 64) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r3, &(0x7f0000000840)="75b442973dac1458936cd25b0a453adf5a"}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000e5ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000c23c00000071114200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x2160) (async) r10 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) 3.064195388s ago: executing program 0 (id=2300): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x200, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (async) close(r6) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r2, 0x0) (async) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x1c, 0x0, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = syz_clone(0x8001100, &(0x7f0000002380)="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", 0x1000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000640)="3718e1632ab1d91de7c308379f8db88a2e6ea69192648cd44b37bf9fb0ae093f2a8db3ed8922470bc87378a6b31d74c334e3ad1638f8567d056a3c1cafee7a450fd20a4d64879d80198456a3778e55c88c9a0f91e8cd182860ebcbf35537aa9e617ba44d50c87b62c9252d148dea7722b07f43dea4d18dfb8e46afcfe974924c8543aa8329e6a341a6ed80ceb1aa0a75711af8fe626fc73ae64fc0301e56fc41f1ef16eb2bd2a58994e11e36b92aa6c0fffb15b34e659ff34878c20606a6a1b21aa6c090f50942ba2a4b27f56c2f5269c8e97562f8f71c7e115895ffc96e270c") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0xd4, 0xf7, 0x8, 0x0, 0x4, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6cdb, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x48a, 0x7, 0x5, 0x4, 0x7, 0x6, 0x6, 0x0, 0x2, 0x0, 0x7}, r10, 0xa, r2, 0x1) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESDEC=r9], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r0}, 0x38) 2.969980121s ago: executing program 2 (id=2301): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127800000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf670000000000001706000007ff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000)=r5, 0x62) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x8264, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x156, 0xfdb7}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffff9d3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3955}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x19, &(0x7f0000000300)=""/25, 0xaee5b285a08e1fb4, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x2, 0xee7f}, 0x10, 0x17f52, 0xffffffffffffffff, 0x4, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0xc}, {0x3, 0x5, 0x2, 0x6}, {0x5, 0x3, 0xc, 0x9}, {0x2, 0x4, 0xe}], 0x10, 0x1000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=0x1, 0x24, 0x1, 0x7, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x4}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x228, 0x0, 0x0, 0x0, 0xf5}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0xac, &(0x7f0000000740)=""/172, 0x41100, 0x46, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0x7fff, 0x1d}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000008c0)=[{0x3, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x5, 0xb}, {0x4, 0x4, 0x2, 0x1}], 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r11, @ANYRES32=r8, @ANYBLOB="1c00d884c62643e401001001000085d4b81f14370aace172cc2a9aa690871e40bb81e358a8968afbf47c065606ab7add19cddd360f185da271546ba462a25538bd93218ac9645626ced9b6a3f0edb6891a5785c36e05648dc3", @ANYRES32=r9, @ANYBLOB, @ANYRES32=r12, @ANYBLOB, @ANYRES64=r10], 0x20) r13 = getpid() r14 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r13, 0x0, 0xffffffffffffffff, 0x0) r15 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x29288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r15, 0xfffffffffffffffc, r14, 0x0) perf_event_open(&(0x7f0000000a80)={0x5, 0x80, 0xb, 0x1, 0x97, 0x0, 0x0, 0x24, 0x210, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x10}, 0x11, 0x9, 0x7, 0x0, 0x3, 0x1, 0x2, 0x0, 0x1000, 0x0, 0x5000000000}, r15, 0xc, r3, 0x1) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) 2.922023023s ago: executing program 4 (id=2302): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x1, 0x10000, 0x0, 0x5, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8915, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.604210206s ago: executing program 2 (id=2303): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40010140) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x10, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x54b2359a, 0x52d0}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fb81371416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x1, 0x0, 0x0, 0x3, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) 1.45552361s ago: executing program 2 (id=2304): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x7f, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x26, &(0x7f0000000100), 0x4) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x0, 0x0, 0x3960, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc79, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0x0, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0xfffffff9, @mcast2, 0xfffffffd}, 0x80, 0x0}, 0x44044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x2c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1.455383421s ago: executing program 4 (id=2305): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x0, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f0300efff000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.352864692s ago: executing program 0 (id=2306): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="ff412f66b083dcc1010b3efc8864", 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x46}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x406) (rerun: 64) 1.008138531s ago: executing program 0 (id=2307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020b00000400003e64f200080000000000000006", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001780)=""/242, 0xf2}, {&(0x7f0000000780)=""/4043, 0xfcb}, {&(0x7f0000002a00)=""/4130, 0x1022}, {&(0x7f0000000680)=""/166, 0xa6}, {&(0x7f0000001880)=""/119, 0x77}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000300)=""/49, 0x31}], 0xb}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f0000003a40)=""/199, 0xc7}], 0x1, &(0x7f0000000400)=""/18, 0x12}, 0x10000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020b00000400003e64f200080000000000000006", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001780)=""/242, 0xf2}, {&(0x7f0000000780)=""/4043, 0xfcb}, {&(0x7f0000002a00)=""/4130, 0x1022}, {&(0x7f0000000680)=""/166, 0xa6}, {&(0x7f0000001880)=""/119, 0x77}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000300)=""/49, 0x31}], 0xb}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f0000003a40)=""/199, 0xc7}], 0x1, &(0x7f0000000400)=""/18, 0x12}, 0x10000) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) (async) 946.324209ms ago: executing program 4 (id=2308): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) close(0x3) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) (async) 758.561596ms ago: executing program 2 (id=2309): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6003b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) 552.190779ms ago: executing program 4 (id=2310): r0 = getpid() r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x34, 0x2, 0x3b, 0x8, 0x0, 0xd, 0x50000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x2}, 0x18000, 0x100000000, 0xa4db, 0x3, 0xa99, 0x2, 0x9, 0x0, 0x1, 0x0, 0x4d0}, 0x0, 0xe, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x2, &(0x7f0000000080)='/\x00'}, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/135, 0x87}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000280)=""/246, 0xf6}], 0x3, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x70}, 0x40000100) write$cgroup_pid(r9, &(0x7f0000000480)=r0, 0x12) ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f00000004c0)={'xfrm0\x00'}) r13 = syz_clone(0x1200200, &(0x7f0000000500)="2b84475f814e0bea8d3019c547cc7be23099ddc1307df10c9c84e95f06cf6fb1af59d63ea17d7559cd3b946adbc30f039fb95d132df5daaa7def8ba1886ecd2e75632c97ae898af62952606c8d9ebf42085384457bffff3b0a63b98ee33b44d3b69916e4c239f93900ce1d96a35de6bd42a73675fb160451d879991f64255c7faffb0beffd533b76f6fedc8c492b567433361980439803a0edb31fb7cbbb40ca7f74a6bb6e14", 0xa6, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="cb97414631277b819cc1a30b4d60c95f7fdb49ae4e01cef01cd2f24c20dc34f50019c15377b35de91e95bf2a085d335e3a823b219ae33ce5410fdb35c481a89053653c877a8c82e8fb8667d1101b27a820473dc7eb56") ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) openat$cgroup_type(r10, &(0x7f00000006c0), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r6, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pi6 \x00'}, 0x20) sendmsg$unix(r10, &(0x7f0000000d40)={&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000780)="7f0623a578ccc869907986be9922f94f4ffbe6ca66934568aa4d2c862b8f255000f754e7b0a979bb903e05fe39eebbbc03da40e0bd625214e95442619c23c7e84903df09beb9238b54325f876a56247362a955998745fb59dfdc", 0x5a}, {&(0x7f0000000800)="32e2615a323367e3dfbdc99159e94963b2a50ceb945a9df1788a5c59651418c02ae229986120810a9883bcf12416bc7bf3c9498346c926ae395dc85f97a18575a97322eafcbeb594ad0e52d458fdc90df59f84926faea3a724e14b11", 0x5c}, {&(0x7f0000000880)="a76366b6f274680e89e9b2c3aba12470a25f0f11e473b0343516b2d2de0b3ba5d8efeaf7baa482084ab65029425e8289a741ca2443218cc92c636730f7e377a8e3a33a1a84cb1370cb8653d8685d7b79aae2d11ff4811efab46ee2e0f5352466f6b8ce9f7bd343454bb49f", 0x6b}, {&(0x7f0000000900)="67f1cdf70a08809ad516172d9b865814276405085e6d6c5db17f813bd8abe225e8ac3d6033cb870261f236b493ce0843bd0110d82453e8c5d6ed4810d0f283313c1e7bfaf12469adb778e2e3def9d3f413772c9ff779c284ab3e602a72c35d2783aabc1e11a06c4098957c209cd4956bbe3520a05048f87e51b8240275d3bf5d742dcea000e75520153ef92cb1af3f8778b495c9366a0407166911bbeb34079e6c7303e9aa98dd6df605d02cf500247401a44beb0d5e12b364cc062762d3ae13003cbf994362aa188ea19e09e1598775bcbc0be26264088006ced8", 0xdb}, {&(0x7f0000000a00)="b1a073ca0d1f2bb4a606b30ef6335764f48f059cc1e8aabd75fc38fb168fb4b4705cf2677ed5aee51f5c7a", 0x2b}, {&(0x7f0000000a40)="6bf94dbc1e22442c7148f0eb4c9a3d1e0b122360616fde9087c3af6708af016752e0edf9cd87989abab3d2aba8d9bffe1d24478e0156240928734fcf903c808d797b40afb768aea04af21cbe9567225b9e6f37d8f34c66e75bfa53036469a1b2", 0x60}, {&(0x7f0000000ac0)="9f8920ce84065aa44c49564ea0abf007f4f2298c4513b2", 0x17}], 0x7, &(0x7f0000000c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r10, r7, r2, r14]}}, @rights={{0x28, 0x1, 0x1, [r1, r6, r3, r1, r4, r8]}}, @cred={{0x1c, 0x1, 0x2, {r0, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r11, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r13, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r11, r12}}}], 0xd0, 0x85}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', 0x0, r8, 0x3, 0x1, 0x5}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(r9, 0x2402, 0x9) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000e00)={'veth0_virt_wifi\x00', 0x800}) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x232, '\x00', 0x0, r3, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={r10, 0x58, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x2, 0x400, 0x3, 0x42050, r15, 0x9, '\x00', r16, r4, 0x1, 0x5, 0x0, 0xf}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x10000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r17, &(0x7f0000001040)="5a079b0b133fb871b07714f43d95f8510a2acbcce8e20ccb2b2f72440dfb97319b517c26ce921e70cfe6206bb0de1817413499d56cc57e444165c40e05a10e680a15caa0f203d282228876ffdc6cf4171b06b27b1fb33952d3ce55a7845561c899d3e81ba7f79a853608604036cdf220c72ae04f3a91b02a17279562de3dfc0fbb4712591f3d46d340125aaf84938b395cf562277fc877fe8fbe4e4aeb000659a35856dcdbfd864e8f15fa701729dd9a26616b6485dcfec70b71d9713a2df304866b1669528ab619a3c6a06028e23335e817c60735ea", &(0x7f0000001140)=""/178}, 0x20) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1, '\x00', r16, r7, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r18, &(0x7f00000012c0)="60304f56d3af327b30ee824a069b3f48c12f0d7881650b7f00c201b1c067a6245732f78da63d73271c7a979e9746e640ee61d025b2c5f9a23ec0f6a8c97d1abc72d13456e8dea74cb40c31159e881789910cc65450ce367226137bb731338f891b352d88c027be896c98ede815770de9b5201906c50c967f093566e5ee48127072235e36d5e2307cc3a911a879ae68533e73d82f8664c2e2f3665fbbdc62f6d2208619473005778c200087fb5997d63c7792c2fdd9b8c326", &(0x7f0000001380)=""/75, 0x4}, 0x20) socket$kcm(0x29, 0x1, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000001440)=r16) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001480)={r7}) recvmsg$unix(r19, &(0x7f0000003940)={&(0x7f00000014c0), 0x6e, &(0x7f0000003840)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)=""/227, 0xe3}, {&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/99, 0x63}, {&(0x7f0000001800)=""/41, 0x29}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x7, &(0x7f00000038c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x80}, 0x20) write$cgroup_pid(r5, &(0x7f0000003980)=r20, 0x12) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000039c0)={@cgroup=r5, r10, 0x2d, 0x10, 0x0, @void, @value=r15}, 0x20) 536.198306ms ago: executing program 0 (id=2311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 203.061387ms ago: executing program 0 (id=2312): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8081, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 317.78µs ago: executing program 2 (id=2313): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03000000000000000300000000000008040000000000000000000002"], 0x0, 0x52}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x5, 0x7c, 0x14}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 0s ago: executing program 4 (id=2314): r0 = socket$kcm(0x23, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x8) (async, rerun: 32) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 78.171315][ T5761] cgroup: Unknown subsys name 'net' [ 78.309213][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.113581][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.734098][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.735301][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.742096][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.757175][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.758217][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.765038][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.780247][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.781266][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.788055][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.795572][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.809230][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.810284][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.816762][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.826029][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.838563][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.839986][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.849964][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.854998][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.868264][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.875981][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.880918][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.883533][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.898720][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.938148][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.348498][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 82.478189][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 82.636505][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 82.657627][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.752243][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.765302][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.773334][ T5773] bridge_slave_0: entered allmulticast mode [ 82.781409][ T5773] bridge_slave_0: entered promiscuous mode [ 82.807669][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.819845][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.827161][ T5783] bridge_slave_0: entered allmulticast mode [ 82.850678][ T5783] bridge_slave_0: entered promiscuous mode [ 82.888560][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.902289][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.909600][ T5773] bridge_slave_1: entered allmulticast mode [ 82.920311][ T5773] bridge_slave_1: entered promiscuous mode [ 82.952930][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.960356][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.967778][ T5783] bridge_slave_1: entered allmulticast mode [ 82.975303][ T5783] bridge_slave_1: entered promiscuous mode [ 83.031305][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.049455][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.064146][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.085115][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.166044][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.175794][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.183162][ T5776] bridge_slave_0: entered allmulticast mode [ 83.190471][ T5776] bridge_slave_0: entered promiscuous mode [ 83.201353][ T5783] team0: Port device team_slave_0 added [ 83.221207][ T5773] team0: Port device team_slave_0 added [ 83.227563][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.234920][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.242675][ T5781] bridge_slave_0: entered allmulticast mode [ 83.249543][ T5781] bridge_slave_0: entered promiscuous mode [ 83.257618][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.267476][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.274987][ T5776] bridge_slave_1: entered allmulticast mode [ 83.284723][ T5776] bridge_slave_1: entered promiscuous mode [ 83.294298][ T5783] team0: Port device team_slave_1 added [ 83.319182][ T5773] team0: Port device team_slave_1 added [ 83.334135][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.341876][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.349492][ T5781] bridge_slave_1: entered allmulticast mode [ 83.359629][ T5781] bridge_slave_1: entered promiscuous mode [ 83.431063][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.438130][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.465176][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.491359][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.504860][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.511988][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.539477][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.552511][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.559554][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.585831][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.597877][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.605284][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.632252][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.646985][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.660380][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.672592][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.740986][ T5781] team0: Port device team_slave_0 added [ 83.781038][ T5781] team0: Port device team_slave_1 added [ 83.803671][ T5776] team0: Port device team_slave_0 added [ 83.813511][ T5776] team0: Port device team_slave_1 added [ 83.833529][ T5773] hsr_slave_0: entered promiscuous mode [ 83.847194][ T5773] hsr_slave_1: entered promiscuous mode [ 83.870495][ T5783] hsr_slave_0: entered promiscuous mode [ 83.871071][ T5778] Bluetooth: hci0: command tx timeout [ 83.882516][ T5783] hsr_slave_1: entered promiscuous mode [ 83.888717][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.897395][ T5783] Cannot create hsr debugfs directory [ 83.915747][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.923391][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.950465][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.961369][ T5778] Bluetooth: hci3: command tx timeout [ 83.964804][ T5782] Bluetooth: hci1: command tx timeout [ 83.981738][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.988738][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.015170][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.026903][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.036742][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.039914][ T5782] Bluetooth: hci2: command tx timeout [ 84.067987][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.117226][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.124735][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.151877][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.303744][ T5776] hsr_slave_0: entered promiscuous mode [ 84.310815][ T5776] hsr_slave_1: entered promiscuous mode [ 84.317251][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.325150][ T5776] Cannot create hsr debugfs directory [ 84.345183][ T5781] hsr_slave_0: entered promiscuous mode [ 84.351938][ T5781] hsr_slave_1: entered promiscuous mode [ 84.358265][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.366679][ T5781] Cannot create hsr debugfs directory [ 84.731446][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.743771][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.756001][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.766298][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.843582][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.855041][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.864977][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.881915][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.984598][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.021917][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.063310][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.076414][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.130409][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.140964][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.164910][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.176932][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.225580][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.253391][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.315395][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.327476][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.388115][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.396505][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.413836][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.421182][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.447937][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.455164][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.485548][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.492763][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.527655][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.573469][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.615337][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.664824][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.672082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.687011][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.694235][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.720256][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.812073][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.819380][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.860671][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.867899][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.950539][ T5782] Bluetooth: hci0: command tx timeout [ 86.039542][ T5782] Bluetooth: hci3: command tx timeout [ 86.039557][ T5778] Bluetooth: hci1: command tx timeout [ 86.110180][ T5782] Bluetooth: hci2: command tx timeout [ 86.225429][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.335187][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.353687][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.457258][ T5783] veth0_vlan: entered promiscuous mode [ 86.493435][ T5776] veth0_vlan: entered promiscuous mode [ 86.533133][ T5783] veth1_vlan: entered promiscuous mode [ 86.548402][ T5773] veth0_vlan: entered promiscuous mode [ 86.572989][ T5773] veth1_vlan: entered promiscuous mode [ 86.582627][ T5776] veth1_vlan: entered promiscuous mode [ 86.631676][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.705554][ T5773] veth0_macvtap: entered promiscuous mode [ 86.715306][ T5776] veth0_macvtap: entered promiscuous mode [ 86.727134][ T5776] veth1_macvtap: entered promiscuous mode [ 86.738121][ T5773] veth1_macvtap: entered promiscuous mode [ 86.748154][ T5783] veth0_macvtap: entered promiscuous mode [ 86.778196][ T5783] veth1_macvtap: entered promiscuous mode [ 86.822912][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.835971][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.848792][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.861818][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.875063][ T5781] veth0_vlan: entered promiscuous mode [ 86.898586][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.923892][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.934928][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.947044][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.956748][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.967638][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.982594][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.994920][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.006289][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.017577][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.026829][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.036466][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.046019][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.058287][ T5781] veth1_vlan: entered promiscuous mode [ 87.077492][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.088576][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.098044][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.108268][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.131108][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.143206][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.154647][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.165601][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.178864][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.211507][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.222911][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.233910][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.243631][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.403010][ T788] cfg80211: failed to load regulatory.db [ 87.431163][ T5781] veth0_macvtap: entered promiscuous mode [ 87.449049][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.452771][ T5781] veth1_macvtap: entered promiscuous mode [ 87.464048][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.527671][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.539198][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.555095][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.565688][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.575675][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.586747][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.598636][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.611204][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.619222][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.688708][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.700547][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.711331][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.722192][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.732207][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.743161][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.755688][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.782270][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.784825][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.799392][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.802017][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.815844][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.825055][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.836933][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.860899][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.945484][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.950908][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.967550][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.994379][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.042134][ T5782] Bluetooth: hci0: command tx timeout [ 88.097422][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.106496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.116493][ T5782] Bluetooth: hci1: command tx timeout [ 88.120103][ T5778] Bluetooth: hci3: command tx timeout [ 88.186798][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.195074][ T5778] Bluetooth: hci2: command tx timeout [ 88.222009][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.456813][ C1] hrtimer: interrupt took 109592 ns [ 89.826835][ T5862] netlink: 'syz.3.5': attribute type 39 has an invalid length. [ 90.164168][ T5778] Bluetooth: hci0: command tx timeout [ 90.191191][ T5778] Bluetooth: hci3: command tx timeout [ 90.249215][ T5778] Bluetooth: hci1: command tx timeout [ 90.486901][ T5778] Bluetooth: hci2: command tx timeout [ 91.026735][ T5874] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.380160][ T5880] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.674212][ T5914] netlink: 'syz.1.18': attribute type 39 has an invalid length. [ 95.863656][ T5920] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 99.678337][ T5961] netlink: 'syz.2.33': attribute type 39 has an invalid length. [ 100.463010][ T5969] kmem_cache_create_usercopy(pid_3) failed with error -22 [ 100.471731][ T5975] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 100.480595][ T5969] CPU: 1 PID: 5969 Comm: syz.1.35 Not tainted syzkaller #0 [ 100.488197][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.498297][ T5969] Call Trace: [ 100.501624][ T5969] [ 100.504584][ T5969] dump_stack_lvl+0x18c/0x250 [ 100.509316][ T5969] ? show_regs_print_info+0x20/0x20 [ 100.514650][ T5969] ? load_image+0x400/0x400 [ 100.519185][ T5969] ? slab_free_freelist_hook+0x130/0x1a0 [ 100.524851][ T5969] ? kmem_cache_create_usercopy+0x218/0x320 [ 100.530785][ T5969] ? __kmem_cache_free+0xba/0x1e0 [ 100.535858][ T5969] kmem_cache_create_usercopy+0x29e/0x320 [ 100.541822][ T5969] kmem_cache_create+0x13/0x20 [ 100.546713][ T5969] copy_pid_ns+0x446/0x9b0 [ 100.551182][ T5969] ? cmp_extents_reverse+0x90/0x90 [ 100.556476][ T5969] ? copy_ipcs+0x92/0x500 [ 100.561025][ T5969] ? copy_utsname+0x97/0x430 [ 100.565753][ T5969] create_new_namespaces+0x2a6/0x6f0 [ 100.571176][ T5969] ? copy_namespaces+0x5c/0x4a0 [ 100.576080][ T5969] ? copy_namespaces+0x5c/0x4a0 [ 100.581077][ T5969] copy_namespaces+0x430/0x4a0 [ 100.585980][ T5969] copy_process+0x1724/0x3d80 [ 100.590879][ T5969] ? plist_add+0x3d8/0x490 [ 100.595442][ T5969] ? copy_process+0x96e/0x3d80 [ 100.600597][ T5969] ? futex_wait+0x4cc/0x5e0 [ 100.605236][ T5969] ? __pidfd_prepare+0x140/0x140 [ 100.610512][ T5969] kernel_clone+0x24b/0x8a0 [ 100.615267][ T5969] ? create_io_thread+0x190/0x190 [ 100.620530][ T5969] ? do_futex+0x2ff/0x3e0 [ 100.624943][ T5969] __x64_sys_clone+0x1b7/0x230 [ 100.629773][ T5969] ? __ia32_sys_vfork+0x140/0x140 [ 100.634962][ T5969] ? lock_chain_count+0x20/0x20 [ 100.639964][ T5969] ? lockdep_hardirqs_on+0x98/0x150 [ 100.645229][ T5969] do_syscall_64+0x55/0xa0 [ 100.649778][ T5969] ? clear_bhb_loop+0x40/0x90 [ 100.654499][ T5969] ? clear_bhb_loop+0x40/0x90 [ 100.659241][ T5969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.665222][ T5969] RIP: 0033:0x7faf67f9c799 [ 100.669686][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.689618][ T5969] RSP: 002b:00007faf68e43fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 100.698176][ T5969] RAX: ffffffffffffffda RBX: 00007faf68216090 RCX: 00007faf67f9c799 [ 100.706467][ T5969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020800000 [ 100.714477][ T5969] RBP: 00007faf68032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 100.722495][ T5969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.730503][ T5969] R13: 00007faf68216128 R14: 00007faf68216090 R15: 00007fff2e3f2c58 [ 100.738540][ T5969] [ 102.619250][ T6007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48'. [ 102.720023][ T6007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48'. [ 102.760790][ T6008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48'. [ 103.577490][ T6017] Illegal XDP return value 4294967274 on prog (id 65) dev N/A, expect packet loss! [ 106.500489][ T5778] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 106.810688][ T6073] Zero length message leads to an empty skb [ 107.789615][ T6083] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 107.864454][ T6083] team0: Device wg1 is of different type [ 108.278993][ T6087] syzkaller0: entered promiscuous mode [ 108.350032][ T6087] syzkaller0: entered allmulticast mode [ 108.415966][ T1085] syzkaller0: tun_net_xmit 48 [ 108.518268][ T6090] syzkaller0: tun_net_xmit 1280 [ 110.523351][ T5778] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 110.532161][ T5778] Bluetooth: hci3: Injecting HCI hardware error event [ 110.544613][ T5782] Bluetooth: hci3: hardware error 0x00 [ 112.231592][ T6108] syzkaller0: entered promiscuous mode [ 112.237610][ T6108] syzkaller0: entered allmulticast mode [ 112.680845][ T5782] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 114.861535][ T6125] netlink: 'syz.2.81': attribute type 13 has an invalid length. [ 114.869463][ T6125] netlink: 164 bytes leftover after parsing attributes in process `syz.2.81'. [ 114.883513][ T6125] syz_tun: refused to change device tx_queue_len [ 114.895824][ T6129] netlink: 'syz.2.81': attribute type 2 has an invalid length. [ 114.905347][ T6129] netlink: 'syz.2.81': attribute type 8 has an invalid length. [ 114.950825][ T6129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.81'. [ 115.041043][ T6139] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.83'. [ 115.508325][ T6154] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.87'. [ 115.530855][ T6157] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.88'. [ 115.541480][ T6155] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.87'. [ 115.556446][ T6157] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.88'. [ 115.575362][ T6157] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.88'. [ 115.595750][ T6157] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.88'. [ 116.946512][ T6184] netlink: 'syz.0.94': attribute type 19 has an invalid length. [ 116.958770][ T6184] netlink: 55 bytes leftover after parsing attributes in process `syz.0.94'. [ 119.105715][ T6192] syz.1.96 (6192) used greatest stack depth: 19784 bytes left [ 119.656674][ T6212] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 120.028333][ T6206] C: renamed from team_slave_0 (while UP) [ 120.234767][ T6206] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 120.249858][ T6206] __nla_validate_parse: 1 callbacks suppressed [ 120.249924][ T6206] netlink: 116 bytes leftover after parsing attributes in process `syz.2.100'. [ 120.303245][ T6206] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.455378][ T6222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.104'. [ 129.255943][ T6314] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 129.274967][ T6314] netlink: 'syz.3.133': attribute type 3 has an invalid length. [ 129.288600][ T6314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.133'. [ 132.822209][ T6367] tap0: tun_chr_ioctl cmd 1074025677 [ 132.845034][ T6367] tap0: linktype set to 823 [ 133.476021][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.510542][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.163903][ T6426] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 135.636967][ T6420] syzkaller0: entered promiscuous mode [ 135.770158][ T6420] syzkaller0: entered allmulticast mode [ 141.586485][ T6467] syzkaller0: entered promiscuous mode [ 141.592639][ T6467] syzkaller0: entered allmulticast mode [ 150.690342][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.712426][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.731963][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.880682][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.888763][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.900110][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.311293][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 152.961713][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.990240][ T5778] Bluetooth: hci4: command tx timeout [ 153.043426][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.066469][ T6535] bridge_slave_0: entered allmulticast mode [ 153.076184][ T6535] bridge_slave_0: entered promiscuous mode [ 153.087777][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.095612][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.103828][ T6535] bridge_slave_1: entered allmulticast mode [ 153.112032][ T6535] bridge_slave_1: entered promiscuous mode [ 153.387865][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.477808][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.530342][ T6535] team0: Port device team_slave_0 added [ 153.637753][ T6535] team0: Port device team_slave_1 added [ 153.757617][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.800070][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.846260][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.873279][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.886631][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.020046][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.215650][ T6535] hsr_slave_0: entered promiscuous mode [ 154.262927][ T6535] hsr_slave_1: entered promiscuous mode [ 154.301237][ T6594] sock: sock_set_timeout: `syz.2.234' (pid 6594) tries to set negative timeout [ 154.309841][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.318439][ T6535] Cannot create hsr debugfs directory [ 154.799024][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.016934][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.070531][ T5778] Bluetooth: hci4: command tx timeout [ 155.150672][ T6613] veth0_to_bond: entered allmulticast mode [ 155.294553][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.479988][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.014266][ T6535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.065060][ T6535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.118473][ T6535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.217741][ T6535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.162169][ T5778] Bluetooth: hci4: command tx timeout [ 157.484334][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.841570][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.034379][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.041821][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.255880][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.263169][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.232611][ T5778] Bluetooth: hci4: command tx timeout [ 159.279035][ T39] hsr_slave_0: left promiscuous mode [ 159.304354][ T39] hsr_slave_1: left promiscuous mode [ 159.343317][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.362457][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.396305][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.420007][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.457033][ T39] bridge_slave_1: left allmulticast mode [ 159.480372][ T39] bridge_slave_1: left promiscuous mode [ 159.499802][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.544359][ T39] bridge_slave_0: left allmulticast mode [ 159.563151][ T39] bridge_slave_0: left promiscuous mode [ 159.575843][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.671064][ T39] veth1_macvtap: left promiscuous mode [ 159.685432][ T39] veth0_macvtap: left promiscuous mode [ 159.766220][ T39] veth1_vlan: left promiscuous mode [ 159.796796][ T39] veth0_vlan: left promiscuous mode [ 161.145626][ T39] team0 (unregistering): Port device team_slave_1 removed [ 161.194141][ T39] team0 (unregistering): Port device team_slave_0 removed [ 161.240443][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.284866][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.628907][ T39] bond0 (unregistering): Released all slaves [ 161.854318][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.917242][ T6535] veth0_vlan: entered promiscuous mode [ 163.060028][ T6535] veth1_vlan: entered promiscuous mode [ 163.281771][ T6783] sit0: entered allmulticast mode [ 163.606973][ T6535] veth0_macvtap: entered promiscuous mode [ 163.629433][ T6535] veth1_macvtap: entered promiscuous mode [ 163.759061][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.770058][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.799950][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.839759][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.866491][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.889868][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.924614][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.026038][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.045299][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.066153][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.084495][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.097191][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.114126][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.128210][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.250412][ T6535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.259508][ T6535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.284503][ T6535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.327250][ T6535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.348332][ T6808] lo: entered allmulticast mode [ 165.520488][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.563038][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.355533][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.379377][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.418656][ T6842] syzkaller0: entered promiscuous mode [ 166.442610][ T6842] syzkaller0: entered allmulticast mode [ 171.641456][ T6917] tap0: tun_chr_ioctl cmd 1074025677 [ 171.647183][ T6917] tap0: linktype set to 778 [ 172.456426][ T6946] veth0_vlan: entered allmulticast mode [ 172.776166][ T6951] syzkaller0: entered promiscuous mode [ 172.809499][ T6951] syzkaller0: entered allmulticast mode [ 172.870744][ T6954] team_slave_1: entered promiscuous mode [ 172.876579][ T6954] team_slave_1: entered allmulticast mode [ 177.673650][ T6979] syzkaller0: entered promiscuous mode [ 177.679396][ T6979] syzkaller0: entered allmulticast mode [ 177.772962][ T6986] syzkaller0: entered promiscuous mode [ 177.785078][ T6986] syzkaller0: entered allmulticast mode [ 181.825823][ T7017] nr0: port 1(hsr0) entered blocking state [ 181.832184][ T7017] nr0: port 1(hsr0) entered disabled state [ 181.838276][ T7017] hsr0: entered allmulticast mode [ 181.843828][ T7017] hsr_slave_0: entered allmulticast mode [ 181.849634][ T7017] hsr_slave_1: entered allmulticast mode [ 181.857344][ T7017] hsr0: entered promiscuous mode [ 182.678916][ T7057] syzkaller0: entered promiscuous mode [ 182.708667][ T7057] syzkaller0: entered allmulticast mode [ 186.636776][ T7100] syzkaller0: entered promiscuous mode [ 186.642702][ T7100] syzkaller0: entered allmulticast mode [ 188.765949][ T7114] syzkaller0: entered promiscuous mode [ 188.811835][ T7114] syzkaller0: entered allmulticast mode [ 191.819164][ T7151] veth0_vlan: entered allmulticast mode [ 195.699156][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.709747][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.763160][ T7246] dummy0: entered promiscuous mode [ 199.768378][ T7246] dummy0: entered allmulticast mode [ 207.246819][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 207.312837][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 207.320037][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 210.714567][ T7438] syzkaller0: entered promiscuous mode [ 210.730636][ T7438] syzkaller0: entered allmulticast mode [ 216.891064][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.899332][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.910579][ T7463] bridge0: entered allmulticast mode [ 216.934996][ T7460] bridge_slave_1: left allmulticast mode [ 216.957231][ T7460] bridge_slave_1: left promiscuous mode [ 217.009318][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.224992][ T7460] bridge_slave_0: left allmulticast mode [ 217.245022][ T7460] bridge_slave_0: left promiscuous mode [ 217.275893][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.261642][ T7507] syzkaller0: entered promiscuous mode [ 219.267217][ T7507] syzkaller0: entered allmulticast mode [ 221.977522][ T7568] netlink: 'syz.1.508': attribute type 25 has an invalid length. [ 222.061185][ T7576] netlink: 'syz.0.511': attribute type 29 has an invalid length. [ 222.099578][ T7576] netlink: 'syz.0.511': attribute type 29 has an invalid length. [ 222.129236][ T7580] netlink: 'syz.0.511': attribute type 29 has an invalid length. [ 222.174488][ T7576] netlink: 'syz.0.511': attribute type 29 has an invalid length. [ 222.258912][ T7576] netlink: 'syz.0.511': attribute type 29 has an invalid length. [ 224.124828][ T7616] netlink: 'syz.2.522': attribute type 21 has an invalid length. [ 224.152804][ T7616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.522'. [ 224.695461][ T7626] netlink: 'syz.1.525': attribute type 12 has an invalid length. [ 224.727484][ T7626] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.525'. [ 225.115441][ T7616] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 225.322926][ T7638] netlink: 183588 bytes leftover after parsing attributes in process `syz.1.528'. [ 225.401786][ T7638] netlink: zone id is out of range [ 225.426574][ T7638] netlink: zone id is out of range [ 225.435642][ T7638] netlink: zone id is out of range [ 227.577559][ T7680] netlink: 'syz.2.539': attribute type 9 has an invalid length. [ 227.608554][ T7680] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.539'. [ 228.152947][ T7695] netlink: 'syz.4.541': attribute type 3 has an invalid length. [ 228.326374][ T7695] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.541'. [ 228.717117][ T7692] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.542'. [ 235.246276][ T7769] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 235.262766][ T7769] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.560'. [ 236.656234][ T7787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.567'. [ 236.806944][ T7787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.567'. [ 236.873759][ T7789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.567'. [ 237.858774][ T7801] sit0: entered promiscuous mode [ 237.870048][ T7801] sit0: entered allmulticast mode [ 239.364330][ T7834] netlink: 'syz.2.579': attribute type 13 has an invalid length. [ 239.416767][ T7834] netlink: 'syz.2.579': attribute type 58 has an invalid length. [ 239.459175][ T7834] netlink: 152 bytes leftover after parsing attributes in process `syz.2.579'. [ 241.355684][ T7872] netlink: 'syz.2.593': attribute type 39 has an invalid length. [ 241.396951][ T7869] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.592'. [ 241.557247][ T7874] netlink: 'syz.4.594': attribute type 27 has an invalid length. [ 241.688856][ T7874] netlink: 132 bytes leftover after parsing attributes in process `syz.4.594'. [ 242.098055][ T7886] netlink: 'syz.2.598': attribute type 23 has an invalid length. [ 242.148809][ T7886] netlink: 168 bytes leftover after parsing attributes in process `syz.2.598'. [ 245.998266][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.009372][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.019704][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.030254][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.040575][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.051155][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.061186][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.071343][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.081798][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.092279][ T7943] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 246.112555][ T7952] netlink: 'syz.4.619': attribute type 21 has an invalid length. [ 248.748305][ T7972] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.624'. [ 249.828274][ T7992] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 249.877310][ T7992] netlink: 55 bytes leftover after parsing attributes in process `syz.1.630'. [ 251.631825][ T8018] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 252.072295][ T8018] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 252.856596][ T8046] netlink: 'syz.4.645': attribute type 33 has an invalid length. [ 252.876983][ T8046] netlink: 152 bytes leftover after parsing attributes in process `syz.4.645'. [ 255.036183][ T8081] netlink: 'syz.0.655': attribute type 21 has an invalid length. [ 255.078518][ T8081] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.121070][ T8081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.129941][ T8081] IPv6: NLM_F_CREATE should be set when creating new route [ 255.137834][ T8081] IPv6: NLM_F_CREATE should be set when creating new route [ 255.145432][ T8081] IPv6: NLM_F_CREATE should be set when creating new route [ 255.199177][ T8078] netlink: 'syz.2.654': attribute type 33 has an invalid length. [ 255.221481][ T8078] netlink: 152 bytes leftover after parsing attributes in process `syz.2.654'. [ 255.839380][ T8100] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.661'. [ 256.377322][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.401020][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.064509][ T8165] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.675'. [ 260.777869][ T8188] can: request_module (can-proto-0) failed. [ 262.453403][ T8219] netlink: 'syz.0.689': attribute type 39 has an invalid length. [ 264.006781][ T8237] netlink: 151448 bytes leftover after parsing attributes in process `syz.1.695'. [ 264.200339][ T8240] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 264.308920][ T8242] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 264.630004][ T8247] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.697'. [ 267.526426][ T8290] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 267.546183][ T8290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.709'. [ 267.580087][ T8290] vcan0: entered promiscuous mode [ 267.593289][ T8290] net_ratelimit: 3319 callbacks suppressed [ 267.593307][ T8290] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 268.345585][ T8315] -1: renamed from syzkaller0 [ 269.567141][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 269.656075][ T8348] IPv6: Can't replace route, no match found [ 270.468076][ T8365] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 270.516507][ T8365] netlink: 'syz.2.727': attribute type 3 has an invalid length. [ 270.683070][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.727'. [ 273.790199][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 274.905234][ T8415] netlink: 'syz.0.741': attribute type 3 has an invalid length. [ 274.924674][ T8415] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.741'. [ 275.752049][ T8439] netlink: 'syz.1.751': attribute type 29 has an invalid length. [ 276.034238][ T8439] netlink: 'syz.1.751': attribute type 29 has an invalid length. [ 276.154503][ T8445] netlink: 'syz.1.751': attribute type 29 has an invalid length. [ 276.608809][ T8466] netlink: 'syz.4.756': attribute type 22 has an invalid length. [ 276.646009][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 277.306624][ T8491] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 277.346551][ T8491] hsr_slave_0: left promiscuous mode [ 277.362055][ T8491] hsr_slave_1: left promiscuous mode [ 278.596645][ T8503] sctp: [Deprecated]: syz.4.767 (pid 8503) Use of int in max_burst socket option deprecated. [ 278.596645][ T8503] Use struct sctp_assoc_value instead [ 278.743499][ T8503] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 278.840613][ T8503] netlink: 'syz.4.767': attribute type 4 has an invalid length. [ 278.848504][ T8503] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.767'. [ 279.720280][ T8523] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.771'. [ 280.010374][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 280.988522][ T8542] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.779'. [ 286.961306][ T8615] syzkaller0: entered promiscuous mode [ 286.990153][ T8615] syzkaller0: entered allmulticast mode [ 287.601323][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.613576][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.624691][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.635392][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.645827][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.657210][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.669301][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.679905][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.690682][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 287.701051][ T8627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 289.410019][ T8631] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.805'. [ 294.628217][ T8673] syzkaller0: entered promiscuous mode [ 294.634068][ T8673] syzkaller0: entered allmulticast mode [ 298.286313][ T8702] netlink: 'syz.0.826': attribute type 33 has an invalid length. [ 298.294296][ T8702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.826'. [ 299.698231][ T8723] netlink: 14 bytes leftover after parsing attributes in process `syz.1.833'. [ 299.902463][ T8723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.970116][ T8723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.083335][ T8723] bond0 (unregistering): Released all slaves [ 301.696447][ T8742] syzkaller0: entered promiscuous mode [ 301.713148][ T8742] syzkaller0: entered allmulticast mode [ 304.591383][ T8757] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 304.599245][ T8757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.843'. [ 304.609243][ T8766] sit0: entered promiscuous mode [ 304.614617][ T8766] sit0: entered allmulticast mode [ 304.946303][ T8775] netlink: 'syz.2.849': attribute type 21 has an invalid length. [ 304.979831][ T8775] netlink: 'syz.2.849': attribute type 20 has an invalid length. [ 308.493793][ T8849] netlink: 'syz.1.869': attribute type 11 has an invalid length. [ 308.946720][ T8863] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.872'. [ 309.212178][ T8864] syzkaller0: entered promiscuous mode [ 309.231346][ T8864] syzkaller0: entered allmulticast mode [ 314.382609][ T8886] netlink: 'syz.2.880': attribute type 6 has an invalid length. [ 314.438847][ T8886] netlink: 168 bytes leftover after parsing attributes in process `syz.2.880'. [ 314.489248][ T8890] netlink: 'syz.4.878': attribute type 21 has an invalid length. [ 314.499952][ T8890] netlink: 128 bytes leftover after parsing attributes in process `syz.4.878'. [ 314.509416][ T8890] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 314.521042][ T8885] netlink: 'syz.2.880': attribute type 6 has an invalid length. [ 314.547464][ T8885] netlink: 168 bytes leftover after parsing attributes in process `syz.2.880'. [ 315.795212][ T8918] syzkaller0: entered promiscuous mode [ 315.855629][ T8918] syzkaller0: entered allmulticast mode [ 317.795436][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.805261][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.956747][ T8976] syzkaller0: entered promiscuous mode [ 319.962528][ T8976] syzkaller0: entered allmulticast mode [ 320.862815][ T8992] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.907'. [ 322.662697][ T8994] netlink: 'syz.2.908': attribute type 3 has an invalid length. [ 322.679949][ T8994] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 322.706122][ T8994] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.908'. [ 322.782723][ T8997] netlink: 'syz.2.908': attribute type 3 has an invalid length. [ 322.826117][ T8997] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 322.848848][ T8997] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.908'. [ 322.893356][ T9002] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.911'. [ 323.534665][ T9012] syzkaller0: entered promiscuous mode [ 323.545254][ T9012] syzkaller0: entered allmulticast mode [ 323.695768][ T9022] netlink: 'syz.2.917': attribute type 9 has an invalid length. [ 323.715959][ T9022] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.917'. [ 329.103107][ T9047] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 329.121316][ T9047] netlink: 'syz.2.923': attribute type 16 has an invalid length. [ 329.180131][ T9047] netlink: 156 bytes leftover after parsing attributes in process `syz.2.923'. [ 329.350796][ T9047] netlink: 149768 bytes leftover after parsing attributes in process `syz.2.923'. [ 329.363443][ T9057] netlink: 'syz.1.928': attribute type 33 has an invalid length. [ 329.382392][ T9057] netlink: 152 bytes leftover after parsing attributes in process `syz.1.928'. [ 329.392188][ T9057] `: renamed from ip6tnl0 (while UP) [ 329.401878][ T9057] net_ratelimit: 3319 callbacks suppressed [ 329.401895][ T9057] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 335.779376][ T9142] syzkaller0: entered promiscuous mode [ 335.799927][ T9142] syzkaller0: entered allmulticast mode [ 335.907256][ T9150] netlink: 'syz.4.955': attribute type 29 has an invalid length. [ 335.940970][ T9150] netlink: 'syz.4.955': attribute type 29 has an invalid length. [ 335.974399][ T9151] netlink: 'syz.4.955': attribute type 29 has an invalid length. [ 336.023098][ T9150] netlink: 'syz.4.955': attribute type 29 has an invalid length. [ 338.409555][ T9158] netlink: 156 bytes leftover after parsing attributes in process `syz.2.958'. [ 338.752569][ T9165] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 338.777404][ T9165] netlink: 'syz.4.960': attribute type 16 has an invalid length. [ 338.831030][ T9165] netlink: 156 bytes leftover after parsing attributes in process `syz.4.960'. [ 338.833758][ T9176] netlink: 149768 bytes leftover after parsing attributes in process `syz.4.960'. [ 341.853352][ T9208] syzkaller0: entered promiscuous mode [ 341.860748][ T9208] syzkaller0: entered allmulticast mode [ 344.149825][ T9218] netlink: 'syz.0.974': attribute type 51 has an invalid length. [ 345.090526][ T9230] netlink: 'syz.0.976': attribute type 10 has an invalid length. [ 345.265757][ T9230] geneve0: entered promiscuous mode [ 345.286718][ T9230] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 345.577900][ T9249] sctp: [Deprecated]: syz.4.983 (pid 9249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.577900][ T9249] Use struct sctp_sack_info instead [ 349.621184][ T9264] netlink: 'syz.2.987': attribute type 33 has an invalid length. [ 349.629541][ T9264] netlink: 152 bytes leftover after parsing attributes in process `syz.2.987'. [ 349.639180][ T9264] `: renamed from team0 (while UP) [ 349.711001][ T9267] syzkaller0: entered promiscuous mode [ 349.719773][ T9267] syzkaller0: entered allmulticast mode [ 353.158254][ T9304] netlink: 'syz.0.995': attribute type 21 has an invalid length. [ 353.172610][ T9304] netlink: 156 bytes leftover after parsing attributes in process `syz.0.995'. [ 353.200983][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 353.290482][ T9298] netlink: 168 bytes leftover after parsing attributes in process `syz.0.995'. [ 353.371881][ T9309] netlink: 'syz.1.994': attribute type 16 has an invalid length. [ 353.390113][ T9309] netlink: 48 bytes leftover after parsing attributes in process `syz.1.994'. [ 353.443258][ T9309] veth1_macvtap: entered allmulticast mode [ 354.560899][ T9339] tap0: tun_chr_ioctl cmd 1074025677 [ 354.564604][ T9341] netlink: 'syz.1.1007': attribute type 4 has an invalid length. [ 354.566462][ T9339] tap0: linktype set to 805 [ 354.591288][ T9341] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1007'. [ 355.382122][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1014'. [ 355.439048][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.675880][ T9365] bridge_slave_0 (unregistering): left allmulticast mode [ 355.693586][ T9365] bridge_slave_0 (unregistering): left promiscuous mode [ 355.701379][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.057512][ T9379] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1018'. [ 357.264703][ T9384] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1020'. [ 357.473379][ T9387] netlink: 'syz.4.1022': attribute type 10 has an invalid length. [ 357.823390][ T9387] team0 (unregistering): Port device team_slave_0 removed [ 357.922043][ T9387] team0 (unregistering): Port device team_slave_1 removed [ 358.118594][ T9393] tun0: tun_chr_ioctl cmd 1074025677 [ 358.124539][ T9393] tun0: linktype set to 776 [ 358.369551][ T9412] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 358.378152][ T9412] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1027'. [ 358.494186][ T9416] netlink: 'syz.2.1028': attribute type 10 has an invalid length. [ 358.526673][ T9416] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1028'. [ 358.535929][ T9416] bond0: entered promiscuous mode [ 358.543097][ T9416] bond_slave_0: entered promiscuous mode [ 358.549356][ T9416] bond_slave_1: entered promiscuous mode [ 358.769483][ T9420] netlink: 'syz.4.1031': attribute type 3 has an invalid length. [ 358.787806][ T9420] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1031'. [ 359.791520][ T9436] netlink: 'syz.0.1035': attribute type 2 has an invalid length. [ 359.799538][ T9436] netlink: 'syz.0.1035': attribute type 4 has an invalid length. [ 359.838123][ T9436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1035'. [ 360.002450][ T9440] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.1036'. [ 360.227332][ T9444] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.1036'. [ 360.768375][ T9455] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1039'. [ 363.636143][ T9471] netlink: 159388 bytes leftover after parsing attributes in process `syz.0.1043'. [ 363.731514][ T9476] netlink: 'syz.1.1044': attribute type 21 has an invalid length. [ 363.775341][ T9476] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1044'. [ 363.794662][ T9473] netlink: 'syz.1.1044': attribute type 21 has an invalid length. [ 363.807436][ T9473] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1044'. [ 363.904073][ T9482] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1047'. [ 363.940154][ T9482] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 363.957050][ T9483] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1047'. [ 363.957703][ T9482] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.064293][ T9483] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 364.072808][ T9483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.654834][ T9508] netlink: 'syz.0.1054': attribute type 21 has an invalid length. [ 364.687945][ T9508] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1054'. [ 367.298324][ T9541] netlink: 'syz.1.1063': attribute type 12 has an invalid length. [ 367.379516][ T9541] netlink: 'syz.1.1063': attribute type 10 has an invalid length. [ 367.406211][ T9545] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 367.444333][ T9546] pim6reg1: entered promiscuous mode [ 367.450161][ T9546] pim6reg1: entered allmulticast mode [ 367.459949][ T9545] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 367.505409][ T9545] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 367.518973][ T9545] netlink: 'syz.2.1065': attribute type 29 has an invalid length. [ 368.086783][ T9567] netlink: 'syz.4.1070': attribute type 21 has an invalid length. [ 368.551923][ T9578] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1075'. [ 368.565703][ T9580] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1074'. [ 368.664464][ T9580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.725701][ T9580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.762917][ T9580] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 368.786495][ T9580] bond0 (unregistering): Released all slaves [ 368.798466][ T9584] validate_nla: 1 callbacks suppressed [ 368.798489][ T9584] netlink: 'syz.1.1077': attribute type 29 has an invalid length. [ 368.844000][ T9584] netlink: 'syz.1.1077': attribute type 29 has an invalid length. [ 368.856479][ T9587] netlink: 'syz.1.1077': attribute type 29 has an invalid length. [ 368.876176][ T9584] netlink: 'syz.1.1077': attribute type 29 has an invalid length. [ 369.006053][ T9586] syzkaller0: entered promiscuous mode [ 369.012022][ T9586] syzkaller0: entered allmulticast mode [ 369.021702][ T9584] macsec0: entered promiscuous mode [ 369.048152][ T9584] macsec0: entered allmulticast mode [ 369.061800][ T9590] netlink: 'syz.0.1079': attribute type 21 has an invalid length. [ 374.463877][ T9596] netlink: 'syz.1.1081': attribute type 21 has an invalid length. [ 374.479854][ T9604] netlink: 'syz.4.1083': attribute type 10 has an invalid length. [ 374.796167][ T9619] netlink: 'syz.2.1085': attribute type 3 has an invalid length. [ 374.855294][ T9619] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1085'. [ 375.451304][ T9635] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 375.481956][ T9635] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 375.512581][ T9638] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 375.538325][ T9635] netlink: 'syz.4.1090': attribute type 29 has an invalid length. [ 375.567475][ T9635] macsec0: entered promiscuous mode [ 375.587804][ T9635] macsec0: entered allmulticast mode [ 375.596612][ T9635] veth1_macvtap: entered allmulticast mode [ 376.002906][ T9653] FAULT_INJECTION: forcing a failure. [ 376.002906][ T9653] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 376.029741][ T9653] CPU: 0 PID: 9653 Comm: syz.4.1096 Not tainted syzkaller #0 [ 376.037215][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.047409][ T9653] Call Trace: [ 376.048165][ T9650] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.1094'. [ 376.050746][ T9653] [ 376.050792][ T9653] dump_stack_lvl+0x18c/0x250 [ 376.050832][ T9653] ? show_regs_print_info+0x20/0x20 [ 376.050860][ T9653] ? load_image+0x400/0x400 [ 376.050888][ T9653] ? __lock_acquire+0x7d40/0x7d40 [ 376.050911][ T9653] ? snprintf+0xe9/0x140 [ 376.050939][ T9653] should_fail_ex+0x39d/0x4d0 [ 376.050974][ T9653] _copy_to_user+0x2f/0xa0 [ 376.050999][ T9653] simple_read_from_buffer+0xe7/0x150 [ 376.051033][ T9653] proc_fail_nth_read+0x1e8/0x260 [ 376.051062][ T9653] ? proc_fault_inject_write+0x360/0x360 [ 376.051091][ T9653] ? fsnotify_perm+0x271/0x5e0 [ 376.051119][ T9653] ? proc_fault_inject_write+0x360/0x360 [ 376.051146][ T9653] vfs_read+0x28b/0x970 [ 376.051186][ T9653] ? kernel_read+0x1e0/0x1e0 [ 376.051230][ T9653] ? __fget_files+0x28/0x4b0 [ 376.051253][ T9653] ? __fget_files+0x28/0x4b0 [ 376.051278][ T9653] ? __fget_files+0x43d/0x4b0 [ 376.051311][ T9653] ? __fdget_pos+0x2a3/0x330 [ 376.152135][ T9653] ? ksys_read+0x75/0x260 [ 376.156539][ T9653] ksys_read+0x150/0x260 [ 376.160829][ T9653] ? vfs_write+0x990/0x990 [ 376.165300][ T9653] ? lockdep_hardirqs_on+0x98/0x150 [ 376.170548][ T9653] do_syscall_64+0x55/0xa0 [ 376.175089][ T9653] ? clear_bhb_loop+0x40/0x90 [ 376.179831][ T9653] ? clear_bhb_loop+0x40/0x90 [ 376.184673][ T9653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.190693][ T9653] RIP: 0033:0x7f7d6795cfce [ 376.195178][ T9653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 376.215622][ T9653] RSP: 002b:00007f7d688e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.224104][ T9653] RAX: ffffffffffffffda RBX: 00007f7d688e46c0 RCX: 00007f7d6795cfce [ 376.232215][ T9653] RDX: 000000000000000f RSI: 00007f7d688e40a0 RDI: 0000000000000006 [ 376.240217][ T9653] RBP: 00007f7d688e4090 R08: 0000000000000000 R09: 0000000000000000 [ 376.248232][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.256509][ T9653] R13: 00007f7d67c16038 R14: 00007f7d67c15fa0 R15: 00007ffd8272cc58 [ 376.264801][ T9653] [ 377.379488][ T9671] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1103'. [ 379.120349][ T5782] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 379.280386][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.299701][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.086338][ T9704] netlink: 'syz.2.1114': attribute type 21 has an invalid length. [ 380.094691][ T9704] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1114'. [ 380.104666][ T9704] netlink: 'syz.2.1114': attribute type 4 has an invalid length. [ 380.380195][ T9695] netlink: 'syz.4.1111': attribute type 3 has an invalid length. [ 380.388237][ T9695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1111'. [ 381.150067][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 381.220581][ T9727] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1121'. [ 381.246836][ T9727] netlink: del zone limit has 4 unknown bytes [ 382.415225][ T9762] delete_channel: no stack [ 382.632991][ T9767] netlink: 'syz.1.1133': attribute type 21 has an invalid length. [ 382.656354][ T9767] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 382.666711][ T9767] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.1133'. [ 382.677260][ T9769] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 382.748721][ T9769] team0: Port device wlan1 added [ 382.780822][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1133'. [ 382.832764][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 383.866640][ T9797] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 383.932712][ T9797] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 383.974380][ T9797] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 383.986399][ T9797] netlink: 'syz.4.1140': attribute type 39 has an invalid length. [ 384.432359][ T9809] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1145'. [ 384.778790][ T9809] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 384.980034][ T9817] netlink: 'syz.2.1147': attribute type 6 has an invalid length. [ 384.987856][ T9817] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1147'. [ 385.765700][ T9830] netlink: 'syz.0.1151': attribute type 17 has an invalid length. [ 385.787724][ T9830] netlink: 'syz.0.1151': attribute type 16 has an invalid length. [ 385.809719][ T9830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1151'. [ 386.497251][ T9849] can: request_module (can-proto-0) failed. [ 387.628958][ T9871] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1161'. [ 388.458563][ T9895] syzkaller0: entered promiscuous mode [ 388.478099][ T9895] syzkaller0: entered allmulticast mode [ 388.753162][ T9910] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1172'. [ 389.106259][ T9914] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1174'. [ 389.136294][ T9914] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1174'. [ 393.313123][ T9940] netlink: 'syz.0.1181': attribute type 12 has an invalid length. [ 393.328990][ T9940] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1181'. [ 394.820273][ T9926] netlink: 'syz.4.1177': attribute type 10 has an invalid length. [ 395.815231][ T9961] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1187'. [ 397.123791][ T9976] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 398.040940][ T9982] syzkaller0: entered promiscuous mode [ 398.046609][ T9982] syzkaller0: entered allmulticast mode [ 399.157048][T10013] sock: sock_set_timeout: `syz.0.1198' (pid 10013) tries to set negative timeout [ 401.691764][T10024] netlink: 'syz.2.1200': attribute type 7 has an invalid length. [ 403.144421][T10044] syzkaller0: entered promiscuous mode [ 403.150695][T10044] syzkaller0: entered allmulticast mode [ 403.730050][T10060] sock: sock_set_timeout: `syz.0.1211' (pid 10060) tries to set negative timeout [ 406.848806][T10078] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1218'. [ 406.951844][T10078] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 408.434385][T10104] syzkaller0: entered promiscuous mode [ 408.443823][T10104] syzkaller0: entered allmulticast mode [ 408.626534][T10126] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1227'. [ 409.916588][T10146] sock: sock_set_timeout: `syz.1.1233' (pid 10146) tries to set negative timeout [ 411.482932][T10126] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1227'. [ 411.860958][T10157] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1235'. [ 413.724755][T10187] syzkaller0: entered promiscuous mode [ 413.749820][T10187] syzkaller0: entered allmulticast mode [ 420.738182][T10207] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 421.010293][T10211] delete_channel: no stack [ 421.631344][T10226] netlink: 'syz.4.1255': attribute type 8 has an invalid length. [ 422.278543][T10238] IPv6: Can't replace route, no match found [ 422.408435][T10239] syzkaller0: entered promiscuous mode [ 422.426396][T10239] syzkaller0: entered allmulticast mode [ 423.267405][T10262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1267'. [ 423.981076][T10273] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1270'. [ 425.951418][T10262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1267'. [ 426.000477][T10273] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 426.008938][T10273] CPU: 1 PID: 10273 Comm: syz.2.1270 Not tainted syzkaller #0 [ 426.016402][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.026578][T10273] Call Trace: [ 426.029924][T10273] [ 426.032906][T10273] dump_stack_lvl+0x18c/0x250 [ 426.037676][T10273] ? show_regs_print_info+0x20/0x20 [ 426.042941][T10273] ? load_image+0x400/0x400 [ 426.047528][T10273] sysfs_warn_dup+0x8e/0xa0 [ 426.052091][T10273] sysfs_do_create_link_sd+0xc0/0x110 [ 426.057528][T10273] device_add_class_symlinks+0x1cf/0x240 [ 426.063409][T10273] device_add+0x507/0xc20 [ 426.068049][T10273] wiphy_register+0x1dad/0x2ae0 [ 426.073007][T10273] ? cfg80211_event_work+0x40/0x40 [ 426.078204][T10273] ? minstrel_ht_alloc+0x88a/0x990 [ 426.083666][T10273] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 426.089838][T10273] ieee80211_register_hw+0x3464/0x4250 [ 426.095435][T10273] ? ieee80211_tasklet_handler+0x20/0x20 [ 426.101096][T10273] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 426.107113][T10273] ? __debug_object_init+0xec/0x450 [ 426.112347][T10273] ? __asan_memset+0x22/0x40 [ 426.117164][T10273] ? __hrtimer_init+0x186/0x270 [ 426.122253][T10273] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 426.128317][T10273] ? mac80211_hwsim_free+0x220/0x220 [ 426.133810][T10273] ? rcu_is_watching+0x15/0xb0 [ 426.138678][T10273] ? kstrndup+0xbd/0x140 [ 426.142942][T10273] hwsim_new_radio_nl+0xdc9/0x1a90 [ 426.148087][T10273] ? __nla_validate+0x50/0x50 [ 426.152905][T10273] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 426.159655][T10273] ? __nla_parse+0x40/0x50 [ 426.164087][T10273] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 426.170465][T10273] genl_family_rcv_msg_doit+0x211/0x310 [ 426.176354][T10273] ? end_current_label_crit_section+0x170/0x170 [ 426.182638][T10273] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 426.188585][T10273] ? bpf_lsm_capable+0x9/0x10 [ 426.193631][T10273] ? security_capable+0x89/0xb0 [ 426.198603][T10273] genl_rcv_msg+0x619/0x7a0 [ 426.203345][T10273] ? genl_bind+0x360/0x360 [ 426.208069][T10273] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 426.214454][T10273] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 426.221166][T10273] ? ref_tracker_free+0x690/0x840 [ 426.226246][T10273] netlink_rcv_skb+0x241/0x4d0 [ 426.231203][T10273] ? genl_bind+0x360/0x360 [ 426.235626][T10273] ? netlink_ack+0x1180/0x1180 [ 426.240604][T10273] ? __lock_acquire+0x7d40/0x7d40 [ 426.245743][T10273] ? down_read+0x1ac/0x2e0 [ 426.250448][T10273] genl_rcv+0x28/0x40 [ 426.254738][T10273] netlink_unicast+0x751/0x8d0 [ 426.259551][T10273] netlink_sendmsg+0x8d0/0xbf0 [ 426.264349][T10273] ? netlink_getsockopt+0x590/0x590 [ 426.269611][T10273] ? aa_sock_msg_perm+0x94/0x150 [ 426.274559][T10273] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 426.279860][T10273] ? security_socket_sendmsg+0x80/0xa0 [ 426.285349][T10273] ? netlink_getsockopt+0x590/0x590 [ 426.290667][T10273] ____sys_sendmsg+0x5ba/0x960 [ 426.295546][T10273] ? __asan_memset+0x22/0x40 [ 426.300275][T10273] ? __sys_sendmsg_sock+0x30/0x30 [ 426.305436][T10273] ? __import_iovec+0x5f2/0x850 [ 426.310501][T10273] ? import_iovec+0x73/0xa0 [ 426.315208][T10273] ___sys_sendmsg+0x2a6/0x360 [ 426.320007][T10273] ? __sys_sendmsg+0x2a0/0x2a0 [ 426.324819][T10273] __se_sys_sendmsg+0x1c2/0x2b0 [ 426.329678][T10273] ? __x64_sys_sendmsg+0x80/0x80 [ 426.334724][T10273] ? lockdep_hardirqs_on+0x98/0x150 [ 426.339932][T10273] do_syscall_64+0x55/0xa0 [ 426.344355][T10273] ? clear_bhb_loop+0x40/0x90 [ 426.349571][T10273] ? clear_bhb_loop+0x40/0x90 [ 426.354383][T10273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.360490][T10273] RIP: 0033:0x7f131419c799 [ 426.365087][T10273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.384893][T10273] RSP: 002b:00007f131503a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.393490][T10273] RAX: ffffffffffffffda RBX: 00007f1314416090 RCX: 00007f131419c799 [ 426.401624][T10273] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 426.410544][T10273] RBP: 00007f1314232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 426.421964][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.430071][T10273] R13: 00007f1314416128 R14: 00007f1314416090 R15: 00007ffc1a04d5d8 [ 426.438265][T10273] [ 426.871707][T10282] bridge0: entered promiscuous mode [ 426.877120][T10282] bridge0: entered allmulticast mode [ 426.901623][T10282] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1273'. [ 426.923416][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 427.120959][T10292] netlink: 208092 bytes leftover after parsing attributes in process `syz.4.1277'. [ 427.208456][T10292] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 427.233819][T10292] netlink: 'syz.4.1277': attribute type 2 has an invalid length. [ 427.264037][T10292] netlink: 'syz.4.1277': attribute type 3 has an invalid length. [ 427.292570][T10292] netlink: 'syz.4.1277': attribute type 4 has an invalid length. [ 429.742855][T10351] netlink: 'syz.4.1296': attribute type 12 has an invalid length. [ 429.781704][T10351] netlink: 'syz.4.1296': attribute type 11 has an invalid length. [ 429.809969][T10351] netlink: 188816 bytes leftover after parsing attributes in process `syz.4.1296'. [ 429.876155][T10353] pimreg: tun_chr_ioctl cmd 1074025677 [ 429.890027][T10353] pimreg: linktype set to 780 [ 429.985929][T10359] netlink: 'syz.0.1297': attribute type 10 has an invalid length. [ 430.098023][T10359] team0: Port device wlan1 removed [ 431.159882][T10371] netlink: 'syz.2.1301': attribute type 4 has an invalid length. [ 431.168096][T10371] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1301'. [ 431.191723][T10358] syz.4.1298 (10358) used greatest stack depth: 18472 bytes left [ 434.037984][T10413] netlink: 'syz.2.1312': attribute type 21 has an invalid length. [ 434.060002][T10413] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.305174][T10431] netlink: 'syz.4.1316': attribute type 10 has an invalid length. [ 434.336087][T10431] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.369966][T10431] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.397973][T10431] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.409440][T10431] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.568899][T10432] netlink: 'syz.4.1316': attribute type 10 has an invalid length. [ 435.859038][T10458] netlink: 'syz.2.1325': attribute type 4 has an invalid length. [ 435.879484][T10458] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1325'. [ 436.308887][T10473] netlink: 'syz.0.1330': attribute type 21 has an invalid length. [ 436.328462][T10474] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1331'. [ 436.342075][T10473] netlink: 'syz.0.1330': attribute type 1 has an invalid length. [ 436.364054][T10473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1330'. [ 436.423646][T10473] netlink: 'syz.0.1330': attribute type 7 has an invalid length. [ 436.852994][T10489] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 437.933227][T10506] macvlan1: entered allmulticast mode [ 438.042894][T10499] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 438.236504][T10499] team0: Device ipvlan1 failed to register rx_handler [ 438.854648][T10533] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 438.922223][T10533] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1344'. [ 439.838522][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.704716][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.712201][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.744931][T10576] netlink: 60687 bytes leftover after parsing attributes in process `syz.1.1357'. [ 440.773032][T10578] netlink: 184920 bytes leftover after parsing attributes in process `syz.0.1356'. [ 441.463964][T10591] netlink: 'syz.2.1360': attribute type 153 has an invalid length. [ 441.466574][T10595] netlink: 'syz.2.1360': attribute type 153 has an invalid length. [ 441.556347][T10595] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1360'. [ 441.596038][T10591] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1360'. [ 441.993710][T10610] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 442.039882][T10610] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1366'. [ 444.422449][T10661] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1379'. [ 444.554748][T10654] syzkaller0: entered promiscuous mode [ 444.653280][T10654] syzkaller0: entered allmulticast mode [ 445.338457][T10678] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1382'. [ 445.743375][T10678] netlink: 22828 bytes leftover after parsing attributes in process `syz.4.1382'. [ 450.549909][T10705] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 450.557409][T10705] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 450.989448][T10711] syzkaller0: entered promiscuous mode [ 451.017698][T10711] syzkaller0: entered allmulticast mode [ 451.227198][T10714] syzkaller0: entered promiscuous mode [ 451.250986][T10714] syzkaller0: entered allmulticast mode [ 458.040502][T10770] netlink: 'syz.2.1404': attribute type 1 has an invalid length. [ 458.213238][T10774] netlink: 'syz.4.1405': attribute type 29 has an invalid length. [ 458.238425][T10774] netlink: 'syz.4.1405': attribute type 29 has an invalid length. [ 458.260803][T10776] netlink: 'syz.4.1405': attribute type 29 has an invalid length. [ 458.890086][T10796] syzkaller0: entered promiscuous mode [ 458.895719][T10796] syzkaller0: entered allmulticast mode [ 463.230841][T10859] syzkaller0: entered promiscuous mode [ 463.236907][T10859] syzkaller0: entered allmulticast mode [ 464.382933][T10888] netlink: 'syz.0.1435': attribute type 9 has an invalid length. [ 464.405398][T10888] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1435'. [ 468.808505][T10927] syzkaller0: entered promiscuous mode [ 468.814386][T10927] syzkaller0: entered allmulticast mode [ 472.570316][T10968] -1: renamed from syzkaller0 [ 472.685464][T10976] netlink: 'syz.4.1458': attribute type 10 has an invalid length. [ 472.699958][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1458'. [ 472.715235][T10976] netlink: 'syz.4.1458': attribute type 10 has an invalid length. [ 472.725804][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1458'. [ 472.761878][T10972] netlink: 'syz.4.1458': attribute type 10 has an invalid length. [ 472.849932][T10972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1458'. [ 473.115542][T10978] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1459'. [ 473.850153][T10990] syzkaller0: entered promiscuous mode [ 473.855756][T10990] syzkaller0: entered allmulticast mode [ 478.329573][T11023] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 478.336922][T11023] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 478.376440][T11027] netlink: 'syz.4.1471': attribute type 21 has an invalid length. [ 478.385393][T11027] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 478.396353][T11027] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1471'. [ 480.217407][T11046] netlink: 'syz.2.1477': attribute type 33 has an invalid length. [ 480.288786][T11046] netlink: 'syz.2.1477': attribute type 3 has an invalid length. [ 480.320298][T11046] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1477'. [ 481.000427][T11052] syzkaller0: entered promiscuous mode [ 481.006190][T11052] syzkaller0: entered allmulticast mode [ 487.280385][T11102] netlink: 'syz.0.1491': attribute type 21 has an invalid length. [ 492.963430][T11190] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.970266][T11190] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 493.081063][T11181] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 493.109550][T11181] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 493.697909][T11202] netlink: 'syz.1.1520': attribute type 39 has an invalid length. [ 495.529842][T11229] netlink: 'syz.2.1525': attribute type 21 has an invalid length. [ 495.942285][T11237] netlink: 'syz.0.1527': attribute type 29 has an invalid length. [ 495.966103][T11237] netlink: 'syz.0.1527': attribute type 29 has an invalid length. [ 496.060461][T11238] delete_channel: no stack [ 496.355991][T11242] veth0_vlan: entered allmulticast mode [ 499.719203][T11291] delete_channel: no stack [ 500.926151][T11321] syzkaller0: entered promiscuous mode [ 501.021154][T11321] syzkaller0: entered allmulticast mode [ 501.822725][T11345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.123082][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.130513][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.262924][T11353] netlink: 'syz.1.1556': attribute type 3 has an invalid length. [ 502.271604][T11353] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1556'. [ 504.335096][T11354] dummy0: entered promiscuous mode [ 504.401940][T11359] netpci0: tun_chr_ioctl cmd 2147767517 [ 504.687073][T11373] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1559'. [ 505.710359][T11383] netlink: 'syz.4.1564': attribute type 29 has an invalid length. [ 505.735343][T11383] netlink: 'syz.4.1564': attribute type 29 has an invalid length. [ 505.762754][T11384] netlink: 'syz.4.1564': attribute type 29 has an invalid length. [ 506.758779][T11397] netlink: 'syz.1.1566': attribute type 39 has an invalid length. [ 506.796194][T11406] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1568'. [ 507.596858][T11411] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1569'. [ 507.677350][T11401] syzkaller0: entered promiscuous mode [ 507.688068][T11401] syzkaller0: entered allmulticast mode [ 512.962095][T11459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.613432][T11468] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1582'. [ 514.233371][T11486] syzkaller0: entered promiscuous mode [ 514.240867][T11486] syzkaller0: entered allmulticast mode [ 518.074393][T11520] netlink: 'syz.2.1593': attribute type 2 has an invalid length. [ 518.096374][T11520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1593'. [ 518.122708][T11519] netlink: 'syz.2.1593': attribute type 2 has an invalid length. [ 518.161782][T11519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1593'. [ 519.035096][T11540] netlink: 'syz.0.1600': attribute type 10 has an invalid length. [ 520.079461][T11556] syzkaller0: entered promiscuous mode [ 520.117486][T11556] syzkaller0: entered allmulticast mode [ 520.254140][T11567] netlink: 'syz.2.1604': attribute type 3 has an invalid length. [ 520.268875][T11567] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1604'. [ 523.518302][T11566] netlink: 'syz.1.1606': attribute type 22 has an invalid length. [ 524.755827][T11611] netlink: 'syz.4.1618': attribute type 4 has an invalid length. [ 524.942909][T11616] netlink: 'syz.1.1619': attribute type 21 has an invalid length. [ 524.951206][T11616] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1619'. [ 526.162894][T11627] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1620'. [ 528.478406][T11638] syzkaller0: entered promiscuous mode [ 528.497496][T11638] syzkaller0: entered allmulticast mode [ 528.857117][T11643] netlink: 'syz.0.1626': attribute type 39 has an invalid length. [ 529.843944][T11643] hsr_slave_1 (unregistering): left promiscuous mode [ 533.114876][T11659] netlink: 'syz.2.1630': attribute type 3 has an invalid length. [ 533.140276][T11659] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 533.577612][T11676] netlink: 'syz.1.1634': attribute type 29 has an invalid length. [ 533.613896][T11676] netlink: 'syz.1.1634': attribute type 29 has an invalid length. [ 533.666275][T11676] netlink: 'syz.1.1634': attribute type 29 has an invalid length. [ 533.706715][T11676] netlink: 'syz.1.1634': attribute type 29 has an invalid length. [ 533.723136][T11676] netlink: 'syz.1.1634': attribute type 29 has an invalid length. [ 534.429159][T11688] syzkaller0: entered promiscuous mode [ 534.464546][T11688] syzkaller0: entered allmulticast mode [ 538.099325][T11720] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 538.167323][T11720] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 539.832415][T11740] syzkaller0: entered promiscuous mode [ 539.848616][T11740] syzkaller0: entered allmulticast mode [ 545.599117][T11799] syzkaller0: entered promiscuous mode [ 545.611331][T11799] syzkaller0: entered allmulticast mode [ 551.441171][T11831] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1674'. [ 551.490696][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 531 [ 551.507208][T11831] netlink: 'syz.2.1674': attribute type 3 has an invalid length. [ 551.525851][T11831] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1674'. [ 551.557616][T11831] netlink: 'syz.2.1674': attribute type 46 has an invalid length. [ 553.790501][T11858] syzkaller0: entered promiscuous mode [ 553.806683][T11858] syzkaller0: entered allmulticast mode [ 558.964067][T11922] netlink: 'syz.4.1697': attribute type 21 has an invalid length. [ 559.293465][T11931] tap0: tun_chr_ioctl cmd 1074025677 [ 559.323278][T11931] tap0: linktype set to 778 [ 559.475147][T11935] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1702'. [ 563.070649][T12007] netlink: 'syz.0.1721': attribute type 1 has an invalid length. [ 563.089100][T12007] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1721'. [ 563.568188][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.574846][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.552266][T12029] netlink: 'syz.1.1727': attribute type 21 has an invalid length. [ 564.595105][T12029] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 564.623007][T12029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1727'. [ 565.167704][T12050] netlink: 'syz.4.1728': attribute type 4 has an invalid length. [ 565.199876][T12050] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1728'. [ 566.886578][T12075] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1738'. [ 566.902994][T12075] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1738'. [ 566.923871][T12075] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1738'. [ 566.937325][T12075] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1738'. [ 567.756365][T12088] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.992164][T12136] netlink: 'syz.1.1755': attribute type 5 has an invalid length. [ 572.081645][T12136] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1755'. [ 572.721840][T12156] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 572.730506][T12156] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1762'. [ 573.262792][T12169] netlink: 127924 bytes leftover after parsing attributes in process `syz.0.1767'. [ 573.302270][T12169] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.1767'. [ 578.407153][T12248] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1789'. [ 579.708292][T12263] veth1_to_bond: entered allmulticast mode [ 580.065071][T12266] netlink: 'syz.0.1794': attribute type 21 has an invalid length. [ 580.398251][T12276] netlink: 'syz.2.1798': attribute type 33 has an invalid length. [ 580.407064][T12277] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1796'. [ 580.418448][T12276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1798'. [ 580.881728][T12289] delete_channel: no stack [ 581.041407][T12288] syzkaller0: entered promiscuous mode [ 581.077986][T12288] syzkaller0: entered allmulticast mode [ 584.957431][T12322] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1807'. [ 584.966876][T12322] veth0_to_bond: entered promiscuous mode [ 585.223700][T12341] netlink: 'syz.4.1813': attribute type 21 has an invalid length. [ 585.912498][T12352] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 585.954336][T12352] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 586.176845][T12352] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 586.558330][T12362] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1822'. [ 587.028228][T12363] sit0: left allmulticast mode [ 587.494574][T12379] netlink: 'syz.1.1828': attribute type 9 has an invalid length. [ 587.529614][T12379] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1828'. [ 588.865552][T12395] netlink: 'syz.2.1831': attribute type 10 has an invalid length. [ 588.912479][T12395] bond0: (slave bond_slave_0): Releasing backup interface [ 588.959151][T12395] bond_slave_0: left promiscuous mode [ 590.430575][T12410] netlink: 'syz.0.1836': attribute type 10 has an invalid length. [ 590.487397][T12410] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.559659][T12410] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.568739][T12410] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.639852][T12410] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.847076][T12410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.899600][T12410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.927921][T12410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.938625][T12410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.970527][T12410] team0: Port device geneve1 added [ 592.083207][T12452] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 592.126304][T12452] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1847'. [ 593.987019][T12483] netlink: 'syz.1.1857': attribute type 10 has an invalid length. [ 594.005786][T12483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1857'. [ 594.029813][T12483] team0: entered promiscuous mode [ 594.034993][T12483] team_slave_0: entered promiscuous mode [ 594.060224][T12483] team_slave_1: entered promiscuous mode [ 594.066405][T12483] team0: entered allmulticast mode [ 594.089831][T12483] team_slave_0: entered allmulticast mode [ 594.116755][T12483] team_slave_1: entered allmulticast mode [ 594.127781][T12483] bridge0: port 3(team0) entered blocking state [ 594.164354][T12483] bridge0: port 3(team0) entered disabled state [ 594.176050][T12483] bridge0: port 3(team0) entered blocking state [ 594.182590][T12483] bridge0: port 3(team0) entered forwarding state [ 594.262844][T12488] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1858'. [ 597.750336][T12549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1875'. [ 598.332062][T12553] syzkaller0: entered promiscuous mode [ 598.389776][T12553] syzkaller0: entered allmulticast mode [ 598.463167][T12565] sit0: left allmulticast mode [ 604.842234][T12613] netlink: 'syz.0.1895': attribute type 3 has an invalid length. [ 604.884883][T12613] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1895'. [ 605.598006][T12625] netlink: 'syz.4.1898': attribute type 17 has an invalid length. [ 605.669842][T12625] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1898'. [ 605.696518][T12625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.030405][T12632] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 606.051828][T12632] netlink: 'syz.4.1901': attribute type 3 has an invalid length. [ 606.073436][T12632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1901'. [ 606.411742][T12639] netlink: 'syz.2.1904': attribute type 10 has an invalid length. [ 606.475531][T12640] netlink: 'syz.2.1904': attribute type 9 has an invalid length. [ 606.500965][T12640] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1904'. [ 607.630053][T12642] netlink: 'syz.2.1904': attribute type 9 has an invalid length. [ 607.648894][T12642] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1904'. [ 609.268025][T12682] netlink: 'syz.2.1916': attribute type 2 has an invalid length. [ 609.278407][T12682] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 609.298759][T12682] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1916'. [ 611.578643][T12724] netlink: 'syz.0.1927': attribute type 10 has an invalid length. [ 611.587664][T12724] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1927'. [ 612.048261][T12738] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 614.236090][T12764] netlink: 'syz.2.1937': attribute type 33 has an invalid length. [ 614.275741][T12764] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1937'. [ 614.303858][T12764] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 614.791241][T12773] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1941'. [ 614.849431][T12773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1941'. [ 615.283840][T12777] netlink: 'syz.4.1942': attribute type 11 has an invalid length. [ 615.301794][T12777] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1942'. [ 615.326435][T12782] veth1_to_bond: entered allmulticast mode [ 617.624413][T12829] netlink: 'syz.2.1955': attribute type 21 has an invalid length. [ 617.641232][T12829] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1955'. [ 619.432044][T12856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.484720][T12858] netlink: 'syz.2.1963': attribute type 11 has an invalid length. [ 621.164002][T12879] netlink: 'syz.0.1966': attribute type 39 has an invalid length. [ 621.207762][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 621.386048][T12880] syzkaller0: entered promiscuous mode [ 621.403948][T12880] syzkaller0: entered allmulticast mode [ 624.996853][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.003371][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.306269][T12944] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1984'. [ 627.325060][ T5782] Bluetooth: hci4: ISO packet for unknown connection handle 3390 [ 627.365222][T12946] netlink: 'syz.0.1982': attribute type 21 has an invalid length. [ 629.668711][T12976] syzkaller0: entered promiscuous mode [ 629.675835][T12976] syzkaller0: entered allmulticast mode [ 630.049216][T12997] netlink: 'syz.0.1995': attribute type 2 has an invalid length. [ 630.221358][T12997] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1995'. [ 636.043234][T13008] netlink: 'syz.4.2000': attribute type 25 has an invalid length. [ 636.051295][T13008] netlink: 'syz.4.2000': attribute type 28 has an invalid length. [ 636.468066][T13032] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2004'. [ 636.991704][T13040] netlink: 'syz.2.2007': attribute type 21 has an invalid length. [ 637.005123][T13040] netlink: 'syz.2.2007': attribute type 30 has an invalid length. [ 637.210413][T13044] netlink: 'syz.0.2008': attribute type 28 has an invalid length. [ 637.218677][T13044] netlink: 'syz.0.2008': attribute type 4 has an invalid length. [ 637.251930][T13044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2008'. [ 637.718967][T13057] syzkaller0: entered promiscuous mode [ 637.736333][T13057] syzkaller0: entered allmulticast mode [ 637.773338][T13052] delete_channel: no stack [ 641.194947][T13065] netlink: 'syz.0.2015': attribute type 12 has an invalid length. [ 641.203294][T13065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2015'. [ 641.877228][T13088] netlink: 'syz.2.2023': attribute type 7 has an invalid length. [ 641.929657][T13088] netlink: 'syz.2.2023': attribute type 1 has an invalid length. [ 641.937782][T13088] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2023'. [ 642.394768][T13099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2025'. [ 642.987734][T13111] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 643.010788][T13111] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2018'. [ 643.189231][T13117] syzkaller0: entered promiscuous mode [ 643.198010][T13117] syzkaller0: entered allmulticast mode [ 643.437700][T13131] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2033'. [ 644.017073][T10873] tipc: Subscription rejected, illegal request [ 646.453148][T13162] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2042'. [ 646.538159][T13169] netlink: 'syz.2.2044': attribute type 21 has an invalid length. [ 646.560983][T13165] netlink: 'syz.4.2043': attribute type 13 has an invalid length. [ 646.569626][T13165] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2043'. [ 646.594437][T13165] syz_tun: refused to change device tx_queue_len [ 646.667367][T13165] netlink: 'syz.4.2043': attribute type 2 has an invalid length. [ 646.682817][T13165] netlink: 'syz.4.2043': attribute type 8 has an invalid length. [ 646.697402][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2043'. [ 646.755953][T13169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.773084][T13169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.802480][T13169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.818628][T13169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.918279][T13185] netlink: 'syz.4.2046': attribute type 10 has an invalid length. [ 648.599431][T13185] veth1_macvtap (unregistering): left allmulticast mode [ 650.675152][T13240] netlink: 'syz.2.2062': attribute type 11 has an invalid length. [ 650.684065][T13240] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.2062'. [ 650.797262][T13243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.842715][T13245] netlink: 'syz.2.2064': attribute type 3 has an invalid length. [ 650.871995][T13245] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2064'. [ 651.561973][T13257] syzkaller0: entered promiscuous mode [ 651.581291][T13257] syzkaller0: entered allmulticast mode [ 655.854408][T13303] netlink: 'syz.0.2079': attribute type 17 has an invalid length. [ 655.868866][T13303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2079'. [ 656.163250][T13301] delete_channel: no stack [ 656.180809][T13305] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 656.917729][T13320] syzkaller0: entered promiscuous mode [ 656.956377][T13320] syzkaller0: entered allmulticast mode [ 661.193942][T13343] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2090'. [ 661.300982][T13343] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 661.309209][T13343] CPU: 1 PID: 13343 Comm: syz.1.2090 Not tainted syzkaller #0 [ 661.316728][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.327255][T13343] Call Trace: [ 661.330656][T13343] [ 661.333704][T13343] dump_stack_lvl+0x18c/0x250 [ 661.338434][T13343] ? show_regs_print_info+0x20/0x20 [ 661.343761][T13343] ? load_image+0x400/0x400 [ 661.348405][T13343] sysfs_warn_dup+0x8e/0xa0 [ 661.352948][T13343] sysfs_do_create_link_sd+0xc0/0x110 [ 661.358353][T13343] device_add_class_symlinks+0x1cf/0x240 [ 661.364108][T13343] device_add+0x507/0xc20 [ 661.368651][T13343] wiphy_register+0x1dad/0x2ae0 [ 661.373556][T13343] ? cfg80211_event_work+0x40/0x40 [ 661.378694][T13343] ? minstrel_ht_alloc+0x88a/0x990 [ 661.384162][T13343] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 661.390608][T13343] ieee80211_register_hw+0x3464/0x4250 [ 661.396572][T13343] ? ieee80211_tasklet_handler+0x20/0x20 [ 661.402442][T13343] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 661.408376][T13343] ? __debug_object_init+0xec/0x450 [ 661.413611][T13343] ? __asan_memset+0x22/0x40 [ 661.418226][T13343] ? __hrtimer_init+0x186/0x270 [ 661.423761][T13343] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 661.430104][T13343] ? mac80211_hwsim_free+0x220/0x220 [ 661.435606][T13343] ? rcu_is_watching+0x15/0xb0 [ 661.440394][T13343] ? kstrndup+0xbd/0x140 [ 661.444689][T13343] hwsim_new_radio_nl+0xdc9/0x1a90 [ 661.449930][T13343] ? __nla_validate+0x50/0x50 [ 661.455011][T13343] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 661.461518][T13343] ? __nla_parse+0x40/0x50 [ 661.466044][T13343] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 661.472405][T13343] genl_family_rcv_msg_doit+0x211/0x310 [ 661.477989][T13343] ? end_current_label_crit_section+0x170/0x170 [ 661.484273][T13343] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 661.490308][T13343] ? bpf_lsm_capable+0x9/0x10 [ 661.495046][T13343] ? security_capable+0x89/0xb0 [ 661.500010][T13343] genl_rcv_msg+0x619/0x7a0 [ 661.504562][T13343] ? genl_bind+0x360/0x360 [ 661.509087][T13343] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 661.515537][T13343] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 661.522192][T13343] netlink_rcv_skb+0x241/0x4d0 [ 661.526987][T13343] ? genl_bind+0x360/0x360 [ 661.531522][T13343] ? netlink_ack+0x1180/0x1180 [ 661.536420][T13343] ? __lock_acquire+0x7d40/0x7d40 [ 661.541566][T13343] ? down_read+0x1ac/0x2e0 [ 661.546102][T13343] genl_rcv+0x28/0x40 [ 661.550196][T13343] netlink_unicast+0x751/0x8d0 [ 661.555012][T13343] netlink_sendmsg+0x8d0/0xbf0 [ 661.559902][T13343] ? netlink_getsockopt+0x590/0x590 [ 661.565217][T13343] ? aa_sock_msg_perm+0x94/0x150 [ 661.570179][T13343] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 661.575811][T13343] ? security_socket_sendmsg+0x80/0xa0 [ 661.581375][T13343] ? netlink_getsockopt+0x590/0x590 [ 661.586615][T13343] ____sys_sendmsg+0x5ba/0x960 [ 661.591537][T13343] ? __asan_memset+0x22/0x40 [ 661.596152][T13343] ? __sys_sendmsg_sock+0x30/0x30 [ 661.601192][T13343] ? __import_iovec+0x5f2/0x850 [ 661.606090][T13343] ? import_iovec+0x73/0xa0 [ 661.610617][T13343] ___sys_sendmsg+0x2a6/0x360 [ 661.615485][T13343] ? __sys_sendmsg+0x2a0/0x2a0 [ 661.620310][T13343] ? debug_mutex_init+0x38/0x70 [ 661.625224][T13343] __se_sys_sendmsg+0x1c2/0x2b0 [ 661.630104][T13343] ? __x64_sys_sendmsg+0x80/0x80 [ 661.635169][T13343] ? lockdep_hardirqs_on+0x98/0x150 [ 661.640530][T13343] do_syscall_64+0x55/0xa0 [ 661.645004][T13343] ? clear_bhb_loop+0x40/0x90 [ 661.649895][T13343] ? clear_bhb_loop+0x40/0x90 [ 661.654608][T13343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.660711][T13343] RIP: 0033:0x7faf67f9c799 [ 661.665153][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.685056][T13343] RSP: 002b:00007faf68e65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.693669][T13343] RAX: ffffffffffffffda RBX: 00007faf68215fa0 RCX: 00007faf67f9c799 [ 661.701835][T13343] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000034 [ 661.710176][T13343] RBP: 00007faf68032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 661.718168][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.726684][T13343] R13: 00007faf68216038 R14: 00007faf68215fa0 R15: 00007fff2e3f2c58 [ 661.734720][T13343] [ 662.600843][T13367] syzkaller0: entered promiscuous mode [ 662.631663][T13367] syzkaller0: entered allmulticast mode [ 665.710820][T13378] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 665.743006][T13378] team0: Device ipvlan1 failed to register rx_handler [ 667.410905][T13425] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 667.425454][T13428] netlink: 'syz.4.2114': attribute type 10 has an invalid length. [ 667.436178][T13425] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2113'. [ 667.724363][T13428] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 667.756574][T13428] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 669.422707][T13455] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 670.243922][T13468] netlink: 'syz.1.2123': attribute type 10 has an invalid length. [ 670.311543][T13468] bridge0: port 3(team0) entered disabled state [ 670.342720][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.377420][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.551413][T13468] bridge0: left promiscuous mode [ 670.611418][T13468] bridge0: left allmulticast mode [ 671.541226][T13492] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2129'. [ 671.637159][T13492] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 671.818758][T13496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 671.852215][T13496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 671.890662][T13495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 671.919921][T13500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 672.065926][T10871] tipc: Subscription rejected, illegal request [ 674.871971][T13543] netlink: 'syz.4.2146': attribute type 10 has an invalid length. [ 674.889784][T13543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2146'. [ 676.598882][T13566] netlink: 16239 bytes leftover after parsing attributes in process `syz.1.2151'. [ 678.346708][T13587] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2159'. [ 678.702716][T13593] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 678.715974][T13593] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2162'. [ 679.052826][T13602] FAULT_INJECTION: forcing a failure. [ 679.052826][T13602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.100296][T13602] CPU: 0 PID: 13602 Comm: syz.0.2166 Not tainted syzkaller #0 [ 679.107852][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.117960][T13602] Call Trace: [ 679.121287][T13602] [ 679.124254][T13602] dump_stack_lvl+0x18c/0x250 [ 679.128998][T13602] ? show_regs_print_info+0x20/0x20 [ 679.134440][T13602] ? load_image+0x400/0x400 [ 679.139266][T13602] ? __lock_acquire+0x7d40/0x7d40 [ 679.144484][T13602] ? snprintf+0xe9/0x140 [ 679.148884][T13602] should_fail_ex+0x39d/0x4d0 [ 679.153616][T13602] _copy_to_user+0x2f/0xa0 [ 679.158099][T13602] simple_read_from_buffer+0xe7/0x150 [ 679.163729][T13602] proc_fail_nth_read+0x1e8/0x260 [ 679.168909][T13602] ? proc_fault_inject_write+0x360/0x360 [ 679.174695][T13602] ? fsnotify_perm+0x271/0x5e0 [ 679.179562][T13602] ? proc_fault_inject_write+0x360/0x360 [ 679.185291][T13602] vfs_read+0x28b/0x970 [ 679.189520][T13602] ? kernel_read+0x1e0/0x1e0 [ 679.194158][T13602] ? __fget_files+0x28/0x4b0 [ 679.198792][T13602] ? __fget_files+0x28/0x4b0 [ 679.203417][T13602] ? __fget_files+0x43d/0x4b0 [ 679.208139][T13602] ? __fdget_pos+0x2a3/0x330 [ 679.212849][T13602] ? ksys_read+0x75/0x260 [ 679.217486][T13602] ksys_read+0x150/0x260 [ 679.221858][T13602] ? vfs_write+0x990/0x990 [ 679.226408][T13602] ? lockdep_hardirqs_on+0x98/0x150 [ 679.231815][T13602] do_syscall_64+0x55/0xa0 [ 679.236350][T13602] ? clear_bhb_loop+0x40/0x90 [ 679.241065][T13602] ? clear_bhb_loop+0x40/0x90 [ 679.245861][T13602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.251872][T13602] RIP: 0033:0x7f128375cfce [ 679.256321][T13602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 679.276326][T13602] RSP: 002b:00007f128459bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.284874][T13602] RAX: ffffffffffffffda RBX: 00007f128459c6c0 RCX: 00007f128375cfce [ 679.292960][T13602] RDX: 000000000000000f RSI: 00007f128459c0a0 RDI: 0000000000000007 [ 679.301046][T13602] RBP: 00007f128459c090 R08: 0000000000000000 R09: 0000000000000000 [ 679.309143][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.317223][T13602] R13: 00007f1283a16038 R14: 00007f1283a15fa0 R15: 00007ffccc83f328 [ 679.325240][T13602] [ 679.463580][T13608] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2167'. [ 680.434028][T13620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2170'. [ 680.837702][T13624] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2172'. [ 680.941373][T13628] netlink: 'syz.2.2174': attribute type 4 has an invalid length. [ 680.960606][T13628] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2174'. [ 681.010154][T13624] : renamed from veth0_to_bond (while UP) [ 684.916600][T13659] netlink: 'syz.0.2183': attribute type 23 has an invalid length. [ 685.448079][T13675] netlink: 'syz.1.2189': attribute type 39 has an invalid length. [ 686.441820][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.448622][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.059094][T13725] netlink: 'syz.2.2204': attribute type 21 has an invalid length. [ 692.799285][T13780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.829910][T13780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.871840][T13780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.899933][T13780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.012837][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 694.143778][T13803] IPv6: Can't replace route, no match found [ 695.371627][T13826] syzkaller0: entered promiscuous mode [ 695.419330][T13826] syzkaller0: entered allmulticast mode [ 695.792488][T13839] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2235'. [ 699.086065][T13853] macsec0: entered promiscuous mode [ 699.091828][T13853] macsec0: entered allmulticast mode [ 699.097244][T13853] veth1_macvtap: entered allmulticast mode [ 699.177326][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 700.898525][T13897] netlink: 'syz.1.2251': attribute type 21 has an invalid length. [ 700.936783][T13897] netlink: 'syz.1.2251': attribute type 3 has an invalid length. [ 701.083196][T13897] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2251'. [ 701.434262][T13904] syzkaller0: entered promiscuous mode [ 701.456740][T13904] syzkaller0: entered allmulticast mode [ 701.611048][T13915] netlink: 'syz.2.2254': attribute type 2 has an invalid length. [ 701.754811][T13915] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2254'. [ 704.369689][T13930] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 704.377712][T13930] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 704.412603][T13930] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 704.441335][T13930] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 704.471122][T13930] team0: Port device wlan1 added [ 705.182917][T13942] netlink: 'syz.1.2262': attribute type 4 has an invalid length. [ 705.209770][T13942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2262'. [ 706.084228][T13965] bridge0: entered promiscuous mode [ 706.100566][T13965] bridge0: entered allmulticast mode [ 706.226756][T13967] syzkaller0: entered promiscuous mode [ 706.246665][T13967] syzkaller0: entered allmulticast mode [ 711.955720][T14002] netlink: 'syz.2.2278': attribute type 21 has an invalid length. [ 712.027315][T14002] netlink: 'syz.2.2278': attribute type 19 has an invalid length. [ 712.130998][T14002] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.2278'. [ 713.141428][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.150467][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.184642][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.239864][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.253335][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 713.263858][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.439359][T10869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.656467][T10869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.825103][T14032] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2285'. [ 713.909180][T10869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.948311][T14032] netlink: 'syz.2.2285': attribute type 7 has an invalid length. [ 714.020518][T10869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.309858][ T5782] Bluetooth: hci0: command tx timeout [ 717.296717][T14047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2290'. [ 717.308690][T14050] netlink: 'syz.2.2290': attribute type 21 has an invalid length. [ 717.322911][T14050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2290'. [ 717.389612][ T5782] Bluetooth: hci0: command tx timeout [ 717.550712][T14014] chnl_net:caif_netlink_parms(): no params data found [ 719.479879][ T5782] Bluetooth: hci0: command tx timeout [ 719.908025][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.937163][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.969792][T14014] bridge_slave_0: entered allmulticast mode [ 720.009787][T14014] bridge_slave_0: entered promiscuous mode [ 720.070759][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.122328][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.130436][T14014] bridge_slave_1: entered allmulticast mode [ 720.138057][T14014] bridge_slave_1: entered promiscuous mode [ 720.235127][T14093] sit0: left promiscuous mode [ 720.241759][T14093] sit0: entered allmulticast mode [ 720.508930][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.532268][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.904784][T14014] team0: Port device team_slave_0 added [ 720.968611][T14114] netlink: 'syz.0.2300': attribute type 10 has an invalid length. [ 720.998312][T14114] team0: Device hsr_slave_0 failed to register rx_handler [ 721.012509][T14119] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2301'. [ 721.034003][T14119] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 721.082952][T14014] team0: Port device team_slave_1 added [ 721.739610][ T5782] Bluetooth: hci0: command tx timeout [ 722.187515][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.194836][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.226233][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.244154][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.252241][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.290591][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.578739][T14128] netlink: 'syz.4.2305': attribute type 10 has an invalid length. [ 722.596893][T14128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2305'. [ 722.646302][T14128] bridge0: port 3(ipvlan1) entered blocking state [ 722.670300][T14128] bridge0: port 3(ipvlan1) entered disabled state [ 722.682646][T14128] ipvlan1: entered allmulticast mode [ 722.695300][T14128] veth0_vlan: entered allmulticast mode [ 722.720100][T14128] ipvlan1: left allmulticast mode [ 722.725545][T14128] veth0_vlan: left allmulticast mode [ 722.731840][T14128] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 722.798273][T14014] hsr_slave_0: entered promiscuous mode [ 722.836498][T14144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2307'. [ 722.883256][T14014] hsr_slave_1: entered promiscuous mode [ 722.899006][T14144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2307'. [ 722.936546][T14146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2307'. [ 722.989299][T14144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2307'. [ 723.151358][T14144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2307'. [ 723.914723][T10869] [ 723.917218][T10869] ====================================================== [ 723.924369][T10869] WARNING: possible circular locking dependency detected [ 723.931428][T10869] syzkaller #0 Not tainted [ 723.935954][T10869] ------------------------------------------------------ [ 723.943149][T10869] kworker/u4:24/10869 is trying to acquire lock: [ 723.949496][T10869] ffff888025dbcd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 723.959302][T10869] [ 723.959302][T10869] but task is already holding lock: [ 723.967208][T10869] ffff88801bb10768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 723.977633][T10869] [ 723.977633][T10869] which lock already depends on the new lock. [ 723.977633][T10869] [ 723.988069][T10869] [ 723.988069][T10869] the existing dependency chain (in reverse order) is: [ 723.997103][T10869] [ 723.997103][T10869] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 724.004873][T10869] __mutex_lock+0x136/0xcc0 [ 724.009952][T10869] ieee80211_open+0x144/0x200 [ 724.015171][T10869] __dev_open+0x2cb/0x430 [ 724.020049][T10869] dev_open+0xab/0x190 [ 724.024865][T10869] team_add_slave+0x75f/0x29a0 [ 724.030267][T10869] do_setlink+0xdfe/0x4130 [ 724.035241][T10869] rtnl_newlink+0x17da/0x20a0 [ 724.040478][T10869] rtnetlink_rcv_msg+0x869/0xfa0 [ 724.046211][T10869] netlink_rcv_skb+0x241/0x4d0 [ 724.051550][T10869] netlink_unicast+0x751/0x8d0 [ 724.056879][T10869] netlink_sendmsg+0x8d0/0xbf0 [ 724.062289][T10869] ____sys_sendmsg+0x5ba/0x960 [ 724.067620][T10869] ___sys_sendmsg+0x2a6/0x360 [ 724.068924][T14179] netlink: 'syz.2.2313': attribute type 11 has an invalid length. [ 724.072927][T10869] __se_sys_sendmsg+0x1c2/0x2b0 [ 724.072950][T10869] do_syscall_64+0x55/0xa0 [ 724.072972][T10869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.072994][T10869] [ 724.072994][T10869] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 724.073046][T10869] __lock_acquire+0x2df1/0x7d40 [ 724.073066][T10869] lock_acquire+0x19e/0x420 [ 724.089321][T14179] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2313'. [ 724.091354][T10869] __mutex_lock+0x136/0xcc0 [ 724.091385][T10869] team_del_slave+0x32/0x1c0 [ 724.091410][T10869] team_device_event+0x28d/0xa20 [ 724.091427][T10869] notifier_call_chain+0x197/0x380 [ 724.105384][T14179] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2313'. [ 724.106408][T10869] unregister_netdevice_many_notify+0x100d/0x1900 [ 724.106436][T10869] unregister_netdevice_queue+0x32c/0x370 [ 724.171002][T10869] _cfg80211_unregister_wdev+0x16b/0x580 [ 724.177319][T10869] ieee80211_remove_interfaces+0x49e/0x690 [ 724.183699][T10869] ieee80211_unregister_hw+0x5d/0x2a0 [ 724.189659][T10869] mac80211_hwsim_del_radio+0x289/0x480 [ 724.195788][T10869] hwsim_exit_net+0x58d/0x650 [ 724.201213][T10869] cleanup_net+0x70a/0xbb0 [ 724.206494][T10869] process_scheduled_works+0xa5d/0x15d0 [ 724.212606][T10869] worker_thread+0xa55/0xfc0 [ 724.218040][T10869] kthread+0x2fa/0x390 [ 724.222876][T10869] ret_from_fork+0x48/0x80 [ 724.227960][T10869] ret_from_fork_asm+0x11/0x20 [ 724.233561][T10869] [ 724.233561][T10869] other info that might help us debug this: [ 724.233561][T10869] [ 724.244126][T10869] Possible unsafe locking scenario: [ 724.244126][T10869] [ 724.251612][T10869] CPU0 CPU1 [ 724.257198][T10869] ---- ---- [ 724.262777][T10869] lock(&rdev->wiphy.mtx); [ 724.267510][T10869] lock(team->team_lock_key#2); [ 724.275226][T10869] lock(&rdev->wiphy.mtx); [ 724.282340][T10869] lock(team->team_lock_key#2); [ 724.287505][T10869] [ 724.287505][T10869] *** DEADLOCK *** [ 724.287505][T10869] [ 724.295808][T10869] 5 locks held by kworker/u4:24/10869: [ 724.301310][T10869] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 724.312538][T10869] #1: ffffc9000579fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 724.323149][T10869] #2: ffffffff8e3b3d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 724.332888][T10869] #3: ffffffff8e3c0d48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 724.343009][T10869] #4: ffff88801bb10768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 724.353982][T10869] [ 724.353982][T10869] stack backtrace: [ 724.360090][T10869] CPU: 0 PID: 10869 Comm: kworker/u4:24 Not tainted syzkaller #0 [ 724.368232][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 724.378859][T10869] Workqueue: netns cleanup_net [ 724.384385][T10869] Call Trace: [ 724.387704][T10869] [ 724.390843][T10869] dump_stack_lvl+0x18c/0x250 [ 724.395751][T10869] ? load_image+0x400/0x400 [ 724.400307][T10869] ? show_regs_print_info+0x20/0x20 [ 724.405559][T10869] ? print_circular_bug+0x12b/0x1a0 [ 724.410818][T10869] check_noncircular+0x2fc/0x400 [ 724.415787][T10869] ? print_deadlock_bug+0x5d0/0x5d0 [ 724.421001][T10869] ? lockdep_lock+0xf5/0x230 [ 724.425606][T10869] ? perf_trace_lock_acquire+0x104/0x410 [ 724.431583][T10869] ? _find_first_zero_bit+0xd3/0x100 [ 724.436888][T10869] __lock_acquire+0x2df1/0x7d40 [ 724.441801][T10869] ? verify_lock_unused+0x140/0x140 [ 724.447275][T10869] ? perf_trace_lock_acquire+0x104/0x410 [ 724.453013][T10869] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 724.459644][T10869] ? perf_trace_lock_acquire+0x104/0x410 [ 724.465395][T10869] lock_acquire+0x19e/0x420 [ 724.469913][T10869] ? team_del_slave+0x32/0x1c0 [ 724.474887][T10869] ? __might_sleep+0xe0/0xe0 [ 724.479514][T10869] ? read_lock_is_recursive+0x20/0x20 [ 724.485318][T10869] __mutex_lock+0x136/0xcc0 [ 724.490229][T10869] ? team_del_slave+0x32/0x1c0 [ 724.495123][T10869] ? __lock_acquire+0x7d40/0x7d40 [ 724.500191][T10869] ? rcu_is_watching+0x15/0xb0 [ 724.505166][T10869] ? trace_contention_end+0x39/0xe0 [ 724.510485][T10869] ? __mutex_lock+0x315/0xcc0 [ 724.515270][T10869] ? team_del_slave+0x32/0x1c0 [ 724.520320][T10869] ? mutex_lock_nested+0x20/0x20 [ 724.525275][T10869] ? bond_netdev_event+0xeb/0xf20 [ 724.530322][T10869] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 724.536019][T10869] team_del_slave+0x32/0x1c0 [ 724.540725][T10869] team_device_event+0x28d/0xa20 [ 724.545680][T10869] notifier_call_chain+0x197/0x380 [ 724.550919][T10869] unregister_netdevice_many_notify+0x100d/0x1900 [ 724.557499][T10869] ? lock_chain_count+0x20/0x20 [ 724.562513][T10869] ? unregister_netdevice_many+0x20/0x20 [ 724.568209][T10869] ? kernfs_remove_by_name_ns+0x117/0x150 [ 724.574056][T10869] ? __lock_acquire+0x7d40/0x7d40 [ 724.579123][T10869] unregister_netdevice_queue+0x32c/0x370 [ 724.585218][T10869] ? list_netdevice+0x730/0x730 [ 724.590384][T10869] ? kernfs_remove_by_name_ns+0x117/0x150 [ 724.596407][T10869] _cfg80211_unregister_wdev+0x16b/0x580 [ 724.602241][T10869] ieee80211_remove_interfaces+0x49e/0x690 [ 724.608157][T10869] ? ieee80211_do_stop+0x1e20/0x1e20 [ 724.613570][T10869] ? rcu_is_watching+0x15/0xb0 [ 724.618673][T10869] ieee80211_unregister_hw+0x5d/0x2a0 [ 724.624276][T10869] mac80211_hwsim_del_radio+0x289/0x480 [ 724.629947][T10869] ? rhashtable_remove_fast+0xc00/0xc00 [ 724.635624][T10869] hwsim_exit_net+0x58d/0x650 [ 724.640333][T10869] ? hwsim_init_net+0x90/0x90 [ 724.645035][T10869] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 724.650889][T10869] cleanup_net+0x70a/0xbb0 [ 724.655437][T10869] ? ops_free_list+0x3b0/0x3b0 [ 724.660310][T10869] ? _raw_spin_unlock_irq+0x23/0x50 [ 724.665527][T10869] ? process_scheduled_works+0x96f/0x15d0 [ 724.671524][T10869] ? process_scheduled_works+0x96f/0x15d0 [ 724.677976][T10869] process_scheduled_works+0xa5d/0x15d0 [ 724.683688][T10869] ? worker_attach_to_pool+0x380/0x380 [ 724.689228][T10869] ? assign_work+0x3d2/0x5d0 [ 724.693848][T10869] worker_thread+0xa55/0xfc0 [ 724.698521][T10869] kthread+0x2fa/0x390 [ 724.702603][T10869] ? pr_cont_work+0x560/0x560 [ 724.707383][T10869] ? kthread_blkcg+0xd0/0xd0 [ 724.712159][T10869] ret_from_fork+0x48/0x80 [ 724.716588][T10869] ? kthread_blkcg+0xd0/0xd0 [ 724.721191][T10869] ret_from_fork_asm+0x11/0x20 [ 724.726204][T10869] [ 724.784067][T10869] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 724.819879][T10869] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 724.850598][T10869] team0: Port device wlan1 removed [ 724.994075][T14185] syzkaller0: entered promiscuous mode [ 725.000443][T14185] syzkaller0: entered allmulticast mode [ 725.177207][T10869] bridge0: port 3(team0) entered disabled state [ 725.201919][T10869] bridge_slave_1: left allmulticast mode [ 725.209463][T10869] bridge_slave_1: left promiscuous mode [ 725.227710][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.254052][T10869] bridge_slave_0: left allmulticast mode [ 725.267877][T10869] bridge_slave_0: left promiscuous mode [ 725.281071][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.304016][T10869] veth1_macvtap: left promiscuous mode [ 725.312138][T10869] veth0_macvtap: left promiscuous mode [ 725.324692][T10869] veth1_vlan: left promiscuous mode [ 725.825892][T10869] team_slave_1 (unregistering): left promiscuous mode [ 725.832788][T10869] team_slave_1 (unregistering): left allmulticast mode [ 725.841009][T10869] team0 (unregistering): Port device team_slave_1 removed [ 725.881615][T10869] team_slave_0 (unregistering): left promiscuous mode [ 725.888473][T10869] team_slave_0 (unregistering): left allmulticast mode [ 725.897642][T10869] team0 (unregistering): Port device team_slave_0 removed [ 726.748647][T14014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.771504][T14014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 726.786737][T14014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 726.803627][T14014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 726.909067][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.934711][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.947968][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.955261][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.988572][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.995848][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.226689][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.285723][T14014] veth0_vlan: entered promiscuous mode [ 727.303138][T14014] veth1_vlan: entered promiscuous mode [ 727.345581][T14014] veth0_macvtap: entered promiscuous mode [ 727.359085][T14014] veth1_macvtap: entered promiscuous mode [ 727.378369][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.390880][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.401726][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.412739][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.424751][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.437925][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.448883][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.462649][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.481124][T14014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.499478][T14014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.508258][T14014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.523740][T14014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.564841][T14014] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 727.601458][T10873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.612917][T14014] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 727.622423][T10873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.661344][T10869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.671610][T10869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50