last executing test programs: 24.535853351s ago: executing program 1 (id=6235): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) r1 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000580)={r0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0xd, &(0x7f00000006c0)=@raw=[@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000740)='syzkaller\x00', 0x7fff, 0xd4, &(0x7f0000000840)=""/212, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x9, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000940)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x2, 0x4, 0x6, 0x7}, {0x4, 0x3, 0x8, 0xb}, {0x4, 0x2, 0xf, 0x9}, {0x1, 0x3, 0xc, 0x3}, {0x3, 0x3, 0xe, 0xc}, {0x1, 0x5, 0x1, 0x3}, {0x0, 0x3, 0x9, 0xf}], 0x10, 0x679c}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000980)={r2, r3}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x0, 0x22, 0x0, &(0x7f0000000c00)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x16, 0x1, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r9, r6, 0x11, 0x0, 0x0, @void, @value=r7, @void, @void, r8}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r10, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)=ANY=[@ANYRES32=r4, @ANYRES16=r9, @ANYBLOB="130000000820e50000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r8], 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc0000000200000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xffc1, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d61d4e2ab1e031b2ff6fdade11f0b43761e3a79d61607b3e36c7477d3297b96e8d6145f66f4dd08b8702f27d96ed60372e02eb62d0dffef", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x39) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000bc0)={r13, r4}, 0xc) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000240)) 9.805193377s ago: executing program 3 (id=6291): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000040000007b8af8ff00000000bfa200000800000007020000f8ffffffb703200008000000b0566f67c1fe94c0850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a80000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r4}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r1) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0001300002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000114000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 8.996908437s ago: executing program 3 (id=6295): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x104002, 0xac5d}, 0x0, 0x7, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x351a, 0xb767, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000840)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f", 0x62}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5b", 0x7a}, {&(0x7f0000000740)="9eb8a2c0e241fb0402ac85631cf8ff8e5a36a410dc8d04ecbcf2464879d3bd8110c8472dd79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed4ca90be62fc749", 0x45}, {&(0x7f0000001200)="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", 0x1b7}], 0x4, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937a6", 0x13}], 0x2, 0x0, 0x0, 0x900}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x2a, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x63, 0x0, &(0x7f0000000580)="250b45387451088e95736d2cbccb60ba4536e95948a24979bd22880a6dd714ab27b318ee9a7ec90fc9b5a66ddf46788166175dea14eb58665903af98eef72a9964963751065f811332165cb1de0ed2cf473d80649c62e5065cd3b0e6354f78567d09c5", 0x0, 0xd03, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 7.672707282s ago: executing program 3 (id=6301): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x3a}, 0x28) sendmsg$inet(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='R', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x12, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0x0) 6.641204463s ago: executing program 3 (id=6305): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8456, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid_for_children\x00') 6.063428012s ago: executing program 3 (id=6310): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181108", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000640)=""/194) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x80d1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc880}, 0x10c002, 0xac5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 5.227298533s ago: executing program 2 (id=6321): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffe, 0xe}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000025c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x808e}, 0x40000102) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 4.694562699s ago: executing program 3 (id=6314): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000000a000000060000000100a904050000000a0000000300000006000000800030612e6100612d00a30aa9e5057a99aced10ec6519b6bc4f36da64c13e09c7036ea48ad42a24b77bc11cbf90e4b9bad0c17edd5dc99eba895740c053c6bad8528c6af6147c327fc44e176b5debe5efbd96d1c8132ccef71442890d42b9bb98f49da7d92bcfd375fe75622037d4f2b71d9f2bd364a6b3a84a02ff45ecf3307d3375568c23a1c8b85b2dd91994827643ac7a9aacbb2e3aab21601de16ea0bcb48e19ab0cd8c8de913bc71dd459df2741efef0130786f8d9bdddb5f30ab901a394cf6787c708d2effaaa43ea1f83d05cba0cb43833217c4de32351576923380da171eaffd17bbae5ff2d63eaa5f2f23ca5c014e70c61ad9e192e3a80938a63cdc5a2fc7c885a5d2664bd324f3ba408b4964e176a35392a54692609b04527b17e3f158a8a7a9"], 0x0, 0x3a}, 0x28) sendmsg$inet(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='R', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x12, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0x0) 3.832259752s ago: executing program 2 (id=6317): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000", 0x29}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.6614845s ago: executing program 1 (id=6249): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x3, 0x5f, &(0x7f0000000240)=""/95, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x6, 0xffffffff, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x0, 0x5, 0xa, 0xc}, {0x0, 0x4, 0x8, 0x7}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800007910e1ffffffffffc200e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.66002602s ago: executing program 4 (id=6328): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffe, 0xe}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000025c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x808e}, 0x40000102) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 3.475532699s ago: executing program 2 (id=6318): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181108", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000640)=""/194) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x80d1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc880}, 0x10c002, 0xac5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 3.353023245s ago: executing program 0 (id=6320): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd4de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x50) 3.339751166s ago: executing program 1 (id=6322): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181108", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000640)=""/194) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x80d1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc880}, 0x10c002, 0xac5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 3.035490251s ago: executing program 0 (id=6323): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b05d25a806f8c6394f90424fc602f0017090a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x8102000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e0400001c008102e00f80ecdb4cb9f207c804a010000000880808fb0a0002001000000000000000c500c50083b8e44485a5b9d70adf568a4f0d2493bf89d325e6ecd07c0c7a7a170d37120d38061bef5f71c5ebba976817ce65bf30a4af9529a601bca7b8e9b2ed1317f755eb57549148730c3a20ccd96a32905f7905d418b46e946ab67b4b58f86f9347a3a29ceb74a8d316220ee8bf7a2159ff6f3aedd96653fd12ad36828d899c08f673e7c89e14c5a3e3780339890efa229244440a22629cacab91eccf62355c7f95f9bc05b15acd124144cd2a43a2433de84cf905ffbc36753e0905096987f26c65eb", 0xec}, {&(0x7f0000000380)="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", 0x2c3}], 0x2, 0x0, 0x0, 0x5865}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.808001632s ago: executing program 2 (id=6324): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001c40)=""/4065, 0xfe1}], 0x1}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.735428565s ago: executing program 1 (id=6325): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r0, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r3 = socket$kcm(0xa, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'gretap0\x00', @random="000000001300"}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x200000002, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0xb701, 0x0) r5 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x12, &(0x7f0000000500), 0x4) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5", 0xd4}], 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.602924552s ago: executing program 4 (id=6326): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x2}}, 0x80, 0x0}, 0x20040056) 2.146880175s ago: executing program 1 (id=6327): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000020080000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f8feffff7f440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) ioctl$TUNSETOFFLOAD(r0, 0x4008744b, 0xf0ff1f00000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x6, 0xfe, 0x7, 0x0, 0x5d31, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3a}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x400}, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000739e0000001000100000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080007000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000b4000073114300000000008510000002000000850000008a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$kcm(0x23, 0x5, 0x0) close(r4) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0x3}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.146549704s ago: executing program 2 (id=6329): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x2}}, 0x80, 0x0}, 0x20040056) (fail_nth: 1) 2.146417055s ago: executing program 4 (id=6330): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000", 0x29}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.960546764s ago: executing program 0 (id=6331): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x41044) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.63542824s ago: executing program 4 (id=6332): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000040000007b8af8ff00000000bfa200000800000007020000f8ffffffb703200008000000b0566f67c1fe94c0850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a80000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r5}, 0xc) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0001300002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000114000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1.447431699s ago: executing program 2 (id=6333): r0 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x200400c1) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc83a9b0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000140)="e14bc4462acedce0084e4338e1f639a84874a322c58070e5bae73f86bb0272f1722fba2e8b6a35a857b295ec054a99d6bf22c109bbc92abc257600b605bfa2950e5a1a7644c77f98d4d9d674ac36ec99090680812c697b1034f8a332e159fbb3289def5abb529c29c8099c118f511df02be8a1e4956800519e54fd27bf9a94", &(0x7f0000000040)=""/41}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={&(0x7f00000003c0)="8ab4abcc76dd938cbf8d7592e62971fc0fed1709a6f09c5aa4356aee29164d3fe074bfd5b08adf27472fd1ca4413bb0175b2e1a298ed8d78cf28920d8db207a64b48600b0e4a7828a60f983b564170eb3aa75415af1e6e12bacd3456f4305ec42aa7e9feb677af3e2674182eb61b9eeab3dd97cc0be4644d00dcf75dfd96ec29c616e6245538449621b334dd1a6eb24597b0bc799f86b317fe1fa70bc17eda35aca2d813fdc9d8c624635b7830519194f637b9", &(0x7f0000000580)=""/235, &(0x7f0000000480), &(0x7f00000004c0)="dbdd3f5ab7fe43c9fcbd1a0d0bcd45eb8e00cadc34973a472c5f8b998450b5970148ec7f75f985f9142370ff7ebee863339bcd342aecf7f1d3c2cd460f77d47f5a84df34aee7d4b83f0432ac06caee434cd7ed1e", 0xa24e, r2}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x25, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x200400c1) (async) socket$kcm(0x2b, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc83a9b0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000140)="e14bc4462acedce0084e4338e1f639a84874a322c58070e5bae73f86bb0272f1722fba2e8b6a35a857b295ec054a99d6bf22c109bbc92abc257600b605bfa2950e5a1a7644c77f98d4d9d674ac36ec99090680812c697b1034f8a332e159fbb3289def5abb529c29c8099c118f511df02be8a1e4956800519e54fd27bf9a94", &(0x7f0000000040)=""/41}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={&(0x7f00000003c0)="8ab4abcc76dd938cbf8d7592e62971fc0fed1709a6f09c5aa4356aee29164d3fe074bfd5b08adf27472fd1ca4413bb0175b2e1a298ed8d78cf28920d8db207a64b48600b0e4a7828a60f983b564170eb3aa75415af1e6e12bacd3456f4305ec42aa7e9feb677af3e2674182eb61b9eeab3dd97cc0be4644d00dcf75dfd96ec29c616e6245538449621b334dd1a6eb24597b0bc799f86b317fe1fa70bc17eda35aca2d813fdc9d8c624635b7830519194f637b9", &(0x7f0000000580)=""/235, &(0x7f0000000480), &(0x7f00000004c0)="dbdd3f5ab7fe43c9fcbd1a0d0bcd45eb8e00cadc34973a472c5f8b998450b5970148ec7f75f985f9142370ff7ebee863339bcd342aecf7f1d3c2cd460f77d47f5a84df34aee7d4b83f0432ac06caee434cd7ed1e", 0xa24e, r2}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1.054710289s ago: executing program 1 (id=6334): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffe, 0xe}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000025c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x808e}, 0x40000102) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 1.033242929s ago: executing program 0 (id=6335): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x6}, 0x4001, 0x0, 0xfffffffc, 0x0, 0xb6eb, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0xf5ff, 0x0, 0x0, 0x2}, 0x48) 926.698585ms ago: executing program 4 (id=6336): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181108", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000640)=""/194) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x80d1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc880}, 0x10c002, 0xac5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 767.402072ms ago: executing program 0 (id=6337): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181108", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000640)=""/194) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x80d1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc880}, 0x10c002, 0xac5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 77.302187ms ago: executing program 4 (id=6338): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 0s ago: executing program 0 (id=6339): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e71c7cb757f0000030000b25bae000400000000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0100000001000000030000000900"/28], 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000008000000000000003a05000018110000", @ANYRES32, @ANYBLOB="0000000000000400b7020000000083000000bf090000000000005509010000000000950000e73263043c0d96ce3f7c1cad007d000000000000000000000ba1bbd076fe9ef2dcee04e413b8f6c3bba72b1c5d28d1388306000000b568b3c6f41fc230cd8f114452e0", @ANYRES32, @ANYBLOB="00000000000000001850000010000000000000000000000018000000050000000000000001000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x400, 0x56, &(0x7f00000004c0)=""/86, 0x41100, 0x1, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000580)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x1000, 0xd9f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r9, r0, r0, r10], 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095", @ANYBLOB="863f76b60df8b12336b945ba3863297d0ece56425f91c847f1e805b51d5718646901a3ffff783476"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="2b0e038200"], 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) kernel console output (not intermixed with test programs): 8.258973][T22131] ? clear_bhb_loop+0x60/0xb0 [ 1018.263733][T22131] ? clear_bhb_loop+0x60/0xb0 [ 1018.268512][T22131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.274473][T22131] RIP: 0033:0x7fe8b299c799 [ 1018.278968][T22131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.298657][T22131] RSP: 002b:00007fe8b37a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1018.307152][T22131] RAX: ffffffffffffffda RBX: 00007fe8b2c15fa0 RCX: 00007fe8b299c799 [ 1018.315197][T22131] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1018.323253][T22131] RBP: 00007fe8b37a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.331297][T22131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.339354][T22131] R13: 00007fe8b2c16038 R14: 00007fe8b2c15fa0 R15: 00007fff5527ad08 [ 1018.347458][T22131] [ 1018.699803][T22143] netlink: 'syz.1.5308': attribute type 41 has an invalid length. [ 1019.403887][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5311'. [ 1021.345830][T22200] netlink: 'syz.0.5326': attribute type 41 has an invalid length. [ 1022.194850][T22215] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5328'. [ 1022.287768][T22211] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1024.737474][T22269] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5344'. [ 1024.813546][T22272] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1025.193407][T22283] netlink: 'syz.3.5351': attribute type 11 has an invalid length. [ 1025.226703][T22283] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1025.688893][T22282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.467577][T22315] netlink: 'syz.2.5360': attribute type 10 has an invalid length. [ 1026.528523][T22315] device geneve0 entered promiscuous mode [ 1026.761470][T22315] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1027.334225][T22326] netlink: 'syz.0.5361': attribute type 41 has an invalid length. [ 1028.136359][T22338] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5362'. [ 1028.471913][T22347] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5365'. [ 1028.695073][T22352] netlink: 'syz.2.5369': attribute type 11 has an invalid length. [ 1028.736317][T22352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5369'. [ 1028.888348][T22351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.904183][T22363] netlink: 81056 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1029.211967][T22376] netlink: 'syz.4.5374': attribute type 10 has an invalid length. [ 1029.310508][T22376] device geneve0 entered promiscuous mode [ 1029.497202][T22376] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1029.688578][T22382] netlink: 'syz.2.5377': attribute type 41 has an invalid length. [ 1029.725525][T22385] netlink: 'syz.0.5378': attribute type 10 has an invalid length. [ 1030.541080][T22402] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1030.753430][T22412] netlink: 'syz.1.5387': attribute type 11 has an invalid length. [ 1030.773799][T22412] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5387'. [ 1031.125336][T22414] device veth0_vlan left promiscuous mode [ 1031.144068][T22414] device veth0_vlan entered promiscuous mode [ 1031.161386][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1031.194785][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1031.229884][T10616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1031.317639][T22410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.772177][T22431] netlink: 'syz.2.5394': attribute type 41 has an invalid length. [ 1032.705184][T22454] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1033.240296][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5401'. [ 1033.336388][T22465] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5403'. [ 1033.815210][T22478] netlink: 81056 bytes leftover after parsing attributes in process `syz.4.5407'. [ 1033.941889][T22483] netlink: 'syz.3.5409': attribute type 10 has an invalid length. [ 1034.939785][T22499] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5413'. [ 1034.984399][T22496] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5411'. [ 1035.792964][T22511] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5416'. [ 1035.920056][T22515] netlink: 'syz.0.5418': attribute type 10 has an invalid length. [ 1036.386669][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5417'. [ 1036.776222][T22539] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5425'. [ 1037.310791][T22554] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5431'. [ 1037.874414][T22568] netlink: 'syz.1.5434': attribute type 10 has an invalid length. [ 1037.922776][T22568] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1038.447388][T22576] __nla_validate_parse: 1 callbacks suppressed [ 1038.447405][T22576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1038.770707][T22576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1038.798262][T22577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1038.962419][T22587] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5438'. [ 1039.191088][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5440'. [ 1039.329221][ T4278] Bluetooth: hci0: ISO packet for unknown connection handle 48 [ 1039.350253][T22601] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.5444'. [ 1039.542129][T22610] netlink: 'syz.1.5446': attribute type 41 has an invalid length. [ 1039.620051][T22609] netlink: 'syz.4.5445': attribute type 29 has an invalid length. [ 1039.655461][T22609] netlink: 'syz.4.5445': attribute type 29 has an invalid length. [ 1039.721668][T22609] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5445'. [ 1039.794014][T22609] netlink: 'syz.4.5445': attribute type 10 has an invalid length. [ 1039.882389][T22609] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1039.922935][T22609] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1039.984739][T22609] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1040.005865][T22609] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1040.202174][T22624] netlink: 'syz.3.5450': attribute type 10 has an invalid length. [ 1040.237351][T22624] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5450'. [ 1040.766864][T22626] netlink: 'syz.4.5451': attribute type 41 has an invalid length. [ 1040.944474][T22643] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5454'. [ 1041.238965][T22646] netlink: 'syz.0.5457': attribute type 11 has an invalid length. [ 1041.357259][T22653] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1041.917185][T22645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.204603][T22666] netlink: 'syz.0.5462': attribute type 29 has an invalid length. [ 1042.253971][T22666] netlink: 'syz.0.5462': attribute type 29 has an invalid length. [ 1042.372321][T22666] netlink: 'syz.0.5462': attribute type 10 has an invalid length. [ 1042.424194][T22666] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1042.511563][T22666] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1042.553908][T22666] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1042.635038][T22666] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1044.048403][T22716] netlink: 'syz.3.5474': attribute type 11 has an invalid length. [ 1044.095907][T22716] __nla_validate_parse: 3 callbacks suppressed [ 1044.096012][T22716] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5474'. [ 1044.228051][T22715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.261073][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1044.755823][T22737] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5480'. [ 1044.771240][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1044.790318][T22739] validate_nla: 1 callbacks suppressed [ 1044.790331][T22739] netlink: 'syz.4.5479': attribute type 41 has an invalid length. [ 1044.806323][T22740] netlink: 'syz.2.5481': attribute type 10 has an invalid length. [ 1047.044643][T22770] netlink: 'syz.0.5487': attribute type 11 has an invalid length. [ 1047.105660][T22770] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5487'. [ 1047.180289][T22773] netlink: 'syz.2.5490': attribute type 2 has an invalid length. [ 1047.245350][T22773] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1047.303032][T22775] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1048.297493][T22763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.313133][T22780] netlink: 'syz.2.5491': attribute type 10 has an invalid length. [ 1048.476147][T22785] netlink: 'syz.3.5492': attribute type 10 has an invalid length. [ 1048.549527][T22790] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5493'. [ 1048.808215][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5495'. [ 1048.894704][T22800] netlink: 'syz.4.5497': attribute type 12 has an invalid length. [ 1048.912000][T22800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5497'. [ 1049.233702][T22815] netlink: 'syz.3.5500': attribute type 41 has an invalid length. [ 1049.279982][T22816] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1049.502250][T22820] netlink: 'syz.2.5503': attribute type 11 has an invalid length. [ 1049.607335][T22820] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5503'. [ 1049.710337][T22800] delete_channel: no stack [ 1049.728946][T22818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.125549][T22831] netlink: 'syz.2.5506': attribute type 10 has an invalid length. [ 1050.282213][T22838] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5508'. [ 1050.580793][T22843] netlink: 'syz.2.5510': attribute type 10 has an invalid length. [ 1050.799844][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1051.045793][T22857] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.5516'. [ 1051.408996][T22863] netlink: 'syz.0.5518': attribute type 41 has an invalid length. [ 1051.545343][T22869] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1051.683028][T22873] netlink: 'syz.1.5520': attribute type 10 has an invalid length. [ 1052.414045][T22891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5526'. [ 1054.125083][T22916] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5533'. [ 1054.184297][T22917] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1054.406224][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.412646][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.575992][T22919] netlink: 'syz.1.5534': attribute type 10 has an invalid length. [ 1054.685767][T22923] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1054.750044][T22923] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1054.762018][T22923] CPU: 0 PID: 22923 Comm: syz.0.5536 Not tainted syzkaller #0 [ 1054.769544][T22923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1054.779635][T22923] Call Trace: [ 1054.782950][T22923] [ 1054.785919][T22923] dump_stack_lvl+0x188/0x24e [ 1054.790651][T22923] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1054.796866][T22923] ? show_regs_print_info+0x12/0x12 [ 1054.802112][T22923] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1054.808326][T22923] ? dump_stack+0x5/0x12 [ 1054.812652][T22923] sysfs_warn_dup+0x8a/0xa0 [ 1054.817220][T22923] sysfs_do_create_link_sd+0xc0/0x110 [ 1054.822650][T22923] device_add+0x7ed/0xfb0 [ 1054.827051][T22923] wiphy_register+0x1d9f/0x2ac0 [ 1054.831974][T22923] ? cfg80211_event_work+0x40/0x40 [ 1054.837147][T22923] ? minstrel_ht_alloc+0x894/0xa20 [ 1054.842336][T22923] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1054.848457][T22923] ieee80211_register_hw+0x2d00/0x39f0 [ 1054.853982][T22923] ? ieee80211_register_hw+0xee1/0x39f0 [ 1054.859578][T22923] ? ieee80211_register_hw+0xee1/0x39f0 [ 1054.865183][T22923] ? ieee80211_tasklet_handler+0x20/0x20 [ 1054.870879][T22923] ? memset+0x1e/0x40 [ 1054.874901][T22923] ? __hrtimer_init+0x186/0x270 [ 1054.879802][T22923] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1054.885587][T22923] hwsim_new_radio_nl+0xafa/0xce0 [ 1054.890681][T22923] genl_family_rcv_msg_doit+0x22a/0x330 [ 1054.896268][T22923] ? end_current_label_crit_section+0x170/0x170 [ 1054.902548][T22923] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1054.908519][T22923] ? bpf_lsm_capable+0x5/0x10 [ 1054.913250][T22923] ? security_capable+0x85/0xb0 [ 1054.918162][T22923] genl_rcv_msg+0x604/0x790 [ 1054.922719][T22923] ? genl_bind+0x360/0x360 [ 1054.927182][T22923] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1054.933581][T22923] netlink_rcv_skb+0x1fb/0x450 [ 1054.938397][T22923] ? genl_bind+0x360/0x360 [ 1054.942851][T22923] ? netlink_ack+0x1170/0x1170 [ 1054.947672][T22923] ? down_read+0x1a8/0x2d0 [ 1054.952149][T22923] genl_rcv+0x24/0x40 [ 1054.956170][T22923] netlink_unicast+0x74d/0x8d0 [ 1054.960987][T22923] netlink_sendmsg+0x8ad/0xbd0 [ 1054.965828][T22923] ? netlink_getsockopt+0x550/0x550 [ 1054.971083][T22923] ? aa_sock_msg_perm+0x94/0x150 [ 1054.976096][T22923] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1054.981445][T22923] ? security_socket_sendmsg+0x7c/0xa0 [ 1054.986953][T22923] ? netlink_getsockopt+0x550/0x550 [ 1054.992203][T22923] ____sys_sendmsg+0x5be/0x970 [ 1054.997072][T22923] ? __sys_sendmsg_sock+0x30/0x30 [ 1055.002157][T22923] ? __import_iovec+0x315/0x500 [ 1055.007097][T22923] ? import_iovec+0x6f/0xa0 [ 1055.011649][T22923] ___sys_sendmsg+0x2a2/0x360 [ 1055.016395][T22923] ? __sys_sendmsg+0x290/0x290 [ 1055.021280][T22923] __se_sys_sendmsg+0x1bb/0x2a0 [ 1055.026192][T22923] ? __x64_sys_sendmsg+0x80/0x80 [ 1055.031199][T22923] ? lockdep_hardirqs_on+0x94/0x140 [ 1055.036443][T22923] do_syscall_64+0x4c/0xa0 [ 1055.040907][T22923] ? clear_bhb_loop+0x60/0xb0 [ 1055.045627][T22923] ? clear_bhb_loop+0x60/0xb0 [ 1055.050353][T22923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1055.056293][T22923] RIP: 0033:0x7f867a79c799 [ 1055.060748][T22923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.080489][T22923] RSP: 002b:00007f867b6a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.088982][T22923] RAX: ffffffffffffffda RBX: 00007f867aa15fa0 RCX: 00007f867a79c799 [ 1055.096994][T22923] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1055.105021][T22923] RBP: 00007f867a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1055.113044][T22923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.121072][T22923] R13: 00007f867aa16038 R14: 00007f867aa15fa0 R15: 00007ffcc688b548 [ 1055.129332][T22923] [ 1056.408147][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5537'. [ 1056.787862][T22951] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1056.981829][T22961] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5546'. [ 1057.750111][T22976] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5552'. [ 1057.890239][T22976] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1058.010190][T22981] netlink: 'syz.0.5554': attribute type 12 has an invalid length. [ 1058.034025][T22981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5554'. [ 1058.268996][T22985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5555'. [ 1058.380910][T22990] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5557'. [ 1058.498666][T22993] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5558'. [ 1058.772879][T22982] delete_channel: no stack [ 1058.918295][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5561'. [ 1059.283865][T23020] FAULT_INJECTION: forcing a failure. [ 1059.283865][T23020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.336160][T23020] CPU: 1 PID: 23020 Comm: syz.0.5569 Not tainted syzkaller #0 [ 1059.343703][T23020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.353893][T23020] Call Trace: [ 1059.357228][T23020] [ 1059.360183][T23020] dump_stack_lvl+0x188/0x24e [ 1059.364935][T23020] ? show_regs_print_info+0x12/0x12 [ 1059.370191][T23020] ? load_image+0x400/0x400 [ 1059.374735][T23020] ? __lock_acquire+0x7d10/0x7d10 [ 1059.379805][T23020] should_fail_ex+0x399/0x4d0 [ 1059.384525][T23020] _copy_from_user+0x2c/0x170 [ 1059.389277][T23020] ___sys_sendmsg+0x1c3/0x360 [ 1059.394016][T23020] ? __sys_sendmsg+0x290/0x290 [ 1059.398846][T23020] ? __lock_acquire+0x7d10/0x7d10 [ 1059.403942][T23020] __se_sys_sendmsg+0x1bb/0x2a0 [ 1059.408850][T23020] ? __x64_sys_sendmsg+0x80/0x80 [ 1059.413850][T23020] ? lockdep_hardirqs_on+0x94/0x140 [ 1059.419100][T23020] do_syscall_64+0x4c/0xa0 [ 1059.423551][T23020] ? clear_bhb_loop+0x60/0xb0 [ 1059.428273][T23020] ? clear_bhb_loop+0x60/0xb0 [ 1059.432989][T23020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.438925][T23020] RIP: 0033:0x7f867a79c799 [ 1059.443387][T23020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.463032][T23020] RSP: 002b:00007f867b6a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.471466][T23020] RAX: ffffffffffffffda RBX: 00007f867aa15fa0 RCX: 00007f867a79c799 [ 1059.479465][T23020] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1059.487452][T23020] RBP: 00007f867b6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.495433][T23020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.503417][T23020] R13: 00007f867aa16038 R14: 00007f867aa15fa0 R15: 00007ffcc688b548 [ 1059.511417][T23020] [ 1059.868743][T23031] __nla_validate_parse: 1 callbacks suppressed [ 1059.868761][T23031] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5573'. [ 1059.914722][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5571'. [ 1060.219924][T23038] netlink: 'syz.3.5575': attribute type 12 has an invalid length. [ 1060.244786][T23038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1060.457565][T23044] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5576'. [ 1060.522752][T23044] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1060.586741][T23044] CPU: 1 PID: 23044 Comm: syz.4.5576 Not tainted syzkaller #0 [ 1060.594290][T23044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.604400][T23044] Call Trace: [ 1060.607720][T23044] [ 1060.610689][T23044] dump_stack_lvl+0x188/0x24e [ 1060.615459][T23044] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1060.621689][T23044] ? show_regs_print_info+0x12/0x12 [ 1060.626949][T23044] ? load_image+0x400/0x400 [ 1060.631535][T23044] sysfs_warn_dup+0x8a/0xa0 [ 1060.636103][T23044] sysfs_do_create_link_sd+0xc0/0x110 [ 1060.641537][T23044] device_add+0x7ed/0xfb0 [ 1060.645940][T23044] wiphy_register+0x1d9f/0x2ac0 [ 1060.650874][T23044] ? cfg80211_event_work+0x40/0x40 [ 1060.656043][T23044] ? minstrel_ht_alloc+0x894/0xa20 [ 1060.661224][T23044] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1060.667348][T23044] ieee80211_register_hw+0x2d00/0x39f0 [ 1060.672858][T23044] ? ieee80211_register_hw+0xee1/0x39f0 [ 1060.678442][T23044] ? ieee80211_register_hw+0xee1/0x39f0 [ 1060.684033][T23044] ? ieee80211_tasklet_handler+0x20/0x20 [ 1060.689714][T23044] ? memset+0x1e/0x40 [ 1060.693723][T23044] ? __hrtimer_init+0x186/0x270 [ 1060.698606][T23044] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1060.704378][T23044] hwsim_new_radio_nl+0xafa/0xce0 [ 1060.709451][T23044] genl_family_rcv_msg_doit+0x22a/0x330 [ 1060.715035][T23044] ? end_current_label_crit_section+0x170/0x170 [ 1060.721314][T23044] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1060.727244][T23044] ? bpf_lsm_capable+0x5/0x10 [ 1060.731954][T23044] ? security_capable+0x85/0xb0 [ 1060.736839][T23044] genl_rcv_msg+0x604/0x790 [ 1060.741370][T23044] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1060.747562][T23044] ? genl_bind+0x360/0x360 [ 1060.751997][T23044] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1060.758383][T23044] netlink_rcv_skb+0x1fb/0x450 [ 1060.763194][T23044] ? genl_bind+0x360/0x360 [ 1060.767632][T23044] ? netlink_ack+0x1170/0x1170 [ 1060.772436][T23044] ? down_read+0x1a8/0x2d0 [ 1060.776891][T23044] genl_rcv+0x24/0x40 [ 1060.780921][T23044] netlink_unicast+0x74d/0x8d0 [ 1060.785731][T23044] netlink_sendmsg+0x8ad/0xbd0 [ 1060.790536][T23044] ? netlink_getsockopt+0x550/0x550 [ 1060.795758][T23044] ? lockdep_hardirqs_on+0x94/0x140 [ 1060.800978][T23044] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1060.807158][T23044] ? aa_sock_msg_perm+0x94/0x150 [ 1060.812134][T23044] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1060.817457][T23044] ? security_socket_sendmsg+0x7c/0xa0 [ 1060.822987][T23044] ? netlink_getsockopt+0x550/0x550 [ 1060.828230][T23044] ____sys_sendmsg+0x5be/0x970 [ 1060.833042][T23044] ? __sys_sendmsg_sock+0x30/0x30 [ 1060.838115][T23044] ? __import_iovec+0x315/0x500 [ 1060.843010][T23044] ? import_iovec+0x6f/0xa0 [ 1060.847544][T23044] ___sys_sendmsg+0x2a2/0x360 [ 1060.852256][T23044] ? __sys_sendmsg+0x290/0x290 [ 1060.857069][T23044] ? ktime_get_real_ts64+0x440/0x440 [ 1060.862402][T23044] __se_sys_sendmsg+0x1bb/0x2a0 [ 1060.867321][T23044] ? __x64_sys_sendmsg+0x80/0x80 [ 1060.872303][T23044] ? lockdep_hardirqs_on+0x94/0x140 [ 1060.877537][T23044] do_syscall_64+0x4c/0xa0 [ 1060.881998][T23044] ? clear_bhb_loop+0x60/0xb0 [ 1060.886708][T23044] ? clear_bhb_loop+0x60/0xb0 [ 1060.891422][T23044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.897336][T23044] RIP: 0033:0x7fd71f79c799 [ 1060.901776][T23044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.921402][T23044] RSP: 002b:00007fd72057c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.929834][T23044] RAX: ffffffffffffffda RBX: 00007fd71fa15fa0 RCX: 00007fd71f79c799 [ 1060.937822][T23044] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1060.945804][T23044] RBP: 00007fd71f832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1060.953795][T23044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.961814][T23044] R13: 00007fd71fa16038 R14: 00007fd71fa15fa0 R15: 00007ffd3e5badf8 [ 1060.969829][T23044] [ 1061.064290][T23049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.087342][T23049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.118934][T23049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.130113][T23049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.149231][T23049] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1061.418592][T23042] delete_channel: no stack [ 1061.651156][T23049] bond0: (slave batadv0): Releasing backup interface [ 1061.762042][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5579'. [ 1061.828337][T23067] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1062.172170][T23071] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5583'. [ 1062.550944][T23079] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5586'. [ 1063.094862][T23090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5589'. [ 1063.663166][T23099] netlink: 'syz.0.5592': attribute type 12 has an invalid length. [ 1063.746795][T23099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5592'. [ 1064.039111][T23106] netlink: 'syz.1.5594': attribute type 11 has an invalid length. [ 1064.423072][T23108] delete_channel: no stack [ 1064.837294][T23105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.103590][T23123] __nla_validate_parse: 1 callbacks suppressed [ 1065.103611][T23123] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5598'. [ 1065.214935][T23126] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.5599'. [ 1065.524838][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5601'. [ 1065.808393][T23146] netlink: 'syz.2.5605': attribute type 11 has an invalid length. [ 1065.823134][T23146] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5605'. [ 1066.157394][T23139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.303363][T23151] netlink: 'syz.4.5606': attribute type 12 has an invalid length. [ 1066.320702][T23151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5606'. [ 1066.401503][T23156] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5608'. [ 1066.470292][T23158] netlink: 'syz.2.5609': attribute type 11 has an invalid length. [ 1066.528240][T23158] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5609'. [ 1066.809311][T23150] delete_channel: no stack [ 1066.943260][T23155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.250450][T23179] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1067.420015][T23181] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5614'. [ 1067.638900][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5616'. [ 1067.904833][T23195] netlink: 'syz.2.5620': attribute type 11 has an invalid length. [ 1068.146424][T23194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.424982][T23208] netlink: 'syz.2.5626': attribute type 12 has an invalid length. [ 1069.179676][T23215] netlink: 'syz.0.5628': attribute type 10 has an invalid length. [ 1069.294828][T23223] netlink: 'syz.3.5639': attribute type 11 has an invalid length. [ 1069.377952][T23217] delete_channel: no stack [ 1069.761676][T23219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.142381][T23240] device pim6reg1 entered promiscuous mode [ 1070.345275][T23244] netlink: 'syz.0.5636': attribute type 11 has an invalid length. [ 1070.365086][T23244] __nla_validate_parse: 5 callbacks suppressed [ 1070.365104][T23244] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5636'. [ 1070.687501][T23243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.874910][T23254] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5640'. [ 1070.972837][T23256] device pim6reg1 entered promiscuous mode [ 1071.715343][T23266] netlink: 'syz.0.5645': attribute type 22 has an invalid length. [ 1072.048891][T23270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5646'. [ 1072.389873][T23277] netlink: 'syz.0.5649': attribute type 10 has an invalid length. [ 1072.743442][T23289] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5653'. [ 1072.835720][T23291] FAULT_INJECTION: forcing a failure. [ 1072.835720][T23291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.970192][T23291] CPU: 0 PID: 23291 Comm: syz.0.5654 Not tainted syzkaller #0 [ 1072.977829][T23291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1072.987921][T23291] Call Trace: [ 1072.991225][T23291] [ 1072.994181][T23291] dump_stack_lvl+0x188/0x24e [ 1072.998899][T23291] ? show_regs_print_info+0x12/0x12 [ 1073.004135][T23291] ? load_image+0x400/0x400 [ 1073.008670][T23291] ? __lock_acquire+0x7d10/0x7d10 [ 1073.013737][T23291] should_fail_ex+0x399/0x4d0 [ 1073.018447][T23291] _copy_from_user+0x2c/0x170 [ 1073.023151][T23291] __sys_bpf+0x2ea/0x780 [ 1073.027439][T23291] ? bpf_link_show_fdinfo+0x380/0x380 [ 1073.032860][T23291] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1073.039062][T23291] __x64_sys_bpf+0x78/0x90 [ 1073.043521][T23291] do_syscall_64+0x4c/0xa0 [ 1073.048252][T23291] ? clear_bhb_loop+0x60/0xb0 [ 1073.052967][T23291] ? clear_bhb_loop+0x60/0xb0 [ 1073.057685][T23291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1073.063606][T23291] RIP: 0033:0x7f867a79c799 [ 1073.068049][T23291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.087673][T23291] RSP: 002b:00007f867b6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1073.096111][T23291] RAX: ffffffffffffffda RBX: 00007f867aa15fa0 RCX: 00007f867a79c799 [ 1073.104109][T23291] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000004 [ 1073.112107][T23291] RBP: 00007f867b6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.120102][T23291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.128089][T23291] R13: 00007f867aa16038 R14: 00007f867aa15fa0 R15: 00007ffcc688b548 [ 1073.136095][T23291] [ 1074.827449][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5661'. [ 1075.116137][T23330] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5666'. [ 1075.985549][T23335] netlink: 'syz.0.5667': attribute type 11 has an invalid length. [ 1075.995756][T23335] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5667'. [ 1076.092473][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5669'. [ 1076.106471][T23334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.162815][T23339] device wlan0 entered promiscuous mode [ 1076.242420][T23343] netlink: 'syz.0.5671': attribute type 10 has an invalid length. [ 1076.362121][T23347] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.5672'. [ 1076.675765][T23357] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5677'. [ 1076.692757][T23355] netlink: 'syz.2.5676': attribute type 12 has an invalid length. [ 1076.745436][T23355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1077.390798][T23368] netlink: 'syz.4.5681': attribute type 11 has an invalid length. [ 1077.527207][T23368] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5681'. [ 1077.827725][T23367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.994581][T23370] delete_channel: no stack [ 1078.464608][T23380] netlink: 'syz.4.5684': attribute type 10 has an invalid length. [ 1078.868769][T23388] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5688'. [ 1079.002161][T23394] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5690'. [ 1079.589269][T23408] netlink: 'syz.3.5694': attribute type 11 has an invalid length. [ 1079.673966][T23408] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5694'. [ 1079.706454][T23407] netlink: 'syz.4.5695': attribute type 12 has an invalid length. [ 1079.736247][T23407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5695'. [ 1079.836961][T23404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.402388][T23407] delete_channel: no stack [ 1080.687068][T23425] netlink: 'syz.1.5708': attribute type 12 has an invalid length. [ 1081.333144][T23442] netlink: 'syz.2.5702': attribute type 10 has an invalid length. [ 1081.428379][T23421] delete_channel: no stack [ 1081.478515][T23444] __nla_validate_parse: 1 callbacks suppressed [ 1081.478534][T23444] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5703'. [ 1081.515466][T23446] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1081.697490][T23449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1082.408348][T23460] netlink: 'syz.3.5711': attribute type 41 has an invalid length. [ 1083.415820][T23486] netlink: 'syz.4.5718': attribute type 12 has an invalid length. [ 1083.445999][T23486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5718'. [ 1083.580787][T23491] netlink: 'syz.1.5719': attribute type 12 has an invalid length. [ 1083.597389][T23491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1083.680083][T23497] netlink: 'syz.2.5720': attribute type 10 has an invalid length. [ 1084.062012][T23505] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1084.270487][T23488] delete_channel: no stack [ 1084.368290][T23496] delete_channel: no stack [ 1084.378337][T23513] FAULT_INJECTION: forcing a failure. [ 1084.378337][T23513] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.438722][T23513] CPU: 1 PID: 23513 Comm: syz.0.5724 Not tainted syzkaller #0 [ 1084.441595][T23515] IPv6: Can't replace route, no match found [ 1084.446256][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.462531][T23513] Call Trace: [ 1084.465849][T23513] [ 1084.468816][T23513] dump_stack_lvl+0x188/0x24e [ 1084.473551][T23513] ? show_regs_print_info+0x12/0x12 [ 1084.478807][T23513] ? load_image+0x400/0x400 [ 1084.483364][T23513] ? __local_bh_enable_ip+0x136/0x1c0 [ 1084.488781][T23513] ? lockdep_hardirqs_on+0x94/0x140 [ 1084.494018][T23513] ? __local_bh_enable_ip+0x136/0x1c0 [ 1084.499435][T23513] should_fail_ex+0x399/0x4d0 [ 1084.504157][T23513] should_failslab+0x5/0x20 [ 1084.508713][T23513] slab_pre_alloc_hook+0x59/0x310 [ 1084.513777][T23513] ? sctp_get_port_local+0xd75/0x1510 [ 1084.519210][T23513] ? sctp_add_bind_addr+0x89/0x350 [ 1084.524379][T23513] __kmem_cache_alloc_node+0x4f/0x260 [ 1084.529812][T23513] ? sctp_add_bind_addr+0x89/0x350 [ 1084.534965][T23513] kmalloc_trace+0x26/0xe0 [ 1084.539434][T23513] sctp_add_bind_addr+0x89/0x350 [ 1084.544422][T23513] sctp_do_bind+0x616/0x990 [ 1084.548989][T23513] sctp_connect_new_asoc+0x266/0x6a0 [ 1084.554329][T23513] ? __sctp_connect+0xd80/0xd80 [ 1084.559225][T23513] ? __local_bh_enable_ip+0x136/0x1c0 [ 1084.564641][T23513] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1084.570225][T23513] ? security_sctp_bind_connect+0x85/0xb0 [ 1084.576009][T23513] sctp_sendmsg+0x15b0/0x2940 [ 1084.580770][T23513] ? sctp_getsockopt+0x8a0/0x8a0 [ 1084.585751][T23513] ? __lock_acquire+0x7d10/0x7d10 [ 1084.590820][T23513] ? aa_af_perm+0x340/0x340 [ 1084.595353][T23513] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1084.601817][T23513] ? inet_sendmsg+0xe5/0x2f0 [ 1084.606441][T23513] ? inet_send_prepare+0x260/0x260 [ 1084.611582][T23513] ____sys_sendmsg+0x5be/0x970 [ 1084.616383][T23513] ? __sys_sendmsg_sock+0x30/0x30 [ 1084.621450][T23513] ? __import_iovec+0x315/0x500 [ 1084.626337][T23513] ? import_iovec+0x6f/0xa0 [ 1084.630865][T23513] ___sys_sendmsg+0x2a2/0x360 [ 1084.635591][T23513] ? __sys_sendmsg+0x290/0x290 [ 1084.640442][T23513] ? ktime_get_real_ts64+0x440/0x440 [ 1084.645776][T23513] __se_sys_sendmsg+0x1bb/0x2a0 [ 1084.650678][T23513] ? __x64_sys_sendmsg+0x80/0x80 [ 1084.655779][T23513] ? lockdep_hardirqs_on+0x94/0x140 [ 1084.661021][T23513] do_syscall_64+0x4c/0xa0 [ 1084.665488][T23513] ? clear_bhb_loop+0x60/0xb0 [ 1084.670194][T23513] ? clear_bhb_loop+0x60/0xb0 [ 1084.674906][T23513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1084.680866][T23513] RIP: 0033:0x7f867a79c799 [ 1084.685314][T23513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.704974][T23513] RSP: 002b:00007f867b6a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.713417][T23513] RAX: ffffffffffffffda RBX: 00007f867aa15fa0 RCX: 00007f867a79c799 [ 1084.721415][T23513] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1084.729413][T23513] RBP: 00007f867b6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.737398][T23513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.745374][T23513] R13: 00007f867aa16038 R14: 00007f867aa15fa0 R15: 00007ffcc688b548 [ 1084.753382][T23513] [ 1084.819980][T23520] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5727'. [ 1084.903169][T23522] netlink: 'syz.4.5726': attribute type 41 has an invalid length. [ 1087.345800][T23572] netlink: 'syz.4.5739': attribute type 39 has an invalid length. [ 1087.544978][T23582] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1087.564047][T23576] netlink: 'syz.1.5740': attribute type 12 has an invalid length. [ 1087.581854][T23576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5740'. [ 1088.033710][T23589] netlink: 'syz.2.5742': attribute type 10 has an invalid length. [ 1088.282193][T23574] delete_channel: no stack [ 1088.482288][T23592] netlink: 'syz.1.5743': attribute type 10 has an invalid length. [ 1088.519648][T23592] netlink: 'syz.1.5743': attribute type 19 has an invalid length. [ 1088.562594][T23592] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5743'. [ 1088.738668][T23595] netlink: 'syz.4.5744': attribute type 41 has an invalid length. [ 1089.787639][T23622] netlink: 'syz.3.5753': attribute type 29 has an invalid length. [ 1089.841266][T23622] netlink: 'syz.3.5753': attribute type 29 has an invalid length. [ 1089.908629][T23631] netlink: 'syz.2.5754': attribute type 12 has an invalid length. [ 1089.947027][T23631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1090.251931][T23640] netlink: 'syz.1.5757': attribute type 12 has an invalid length. [ 1090.325684][T23640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5757'. [ 1090.633968][T23648] netlink: 'syz.0.5758': attribute type 11 has an invalid length. [ 1090.671883][T23631] delete_channel: no stack [ 1090.683702][T23648] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5758'. [ 1090.767103][T23647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.142764][T23642] delete_channel: no stack [ 1094.154525][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1095.018454][T23687] validate_nla: 2 callbacks suppressed [ 1095.018494][T23687] netlink: 'syz.3.5770': attribute type 12 has an invalid length. [ 1095.042866][T23687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5770'. [ 1095.541833][T23695] netlink: 'syz.2.5771': attribute type 11 has an invalid length. [ 1095.554625][T23695] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1095.627289][T23686] delete_channel: no stack [ 1095.760314][T23693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.441320][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5780'. [ 1099.668046][T23732] netlink: 'syz.4.5782': attribute type 12 has an invalid length. [ 1099.676152][T23732] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1099.911476][T23742] netlink: 'syz.0.5785': attribute type 12 has an invalid length. [ 1099.969286][T23742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5785'. [ 1100.277967][T23731] delete_channel: no stack [ 1100.687868][T23742] delete_channel: no stack [ 1100.908277][T23764] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.5790'. [ 1101.006309][T23760] netlink: 'syz.3.5788': attribute type 41 has an invalid length. [ 1101.171122][T23769] netlink: 'syz.1.5793': attribute type 10 has an invalid length. [ 1101.396970][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1103.812058][T23815] netlink: 'syz.4.5802': attribute type 10 has an invalid length. [ 1104.142908][T23822] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5805'. [ 1104.542125][T23828] netlink: 'syz.4.5808': attribute type 11 has an invalid length. [ 1104.550365][T23828] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1104.654412][T23827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.804147][T23830] netlink: 'syz.1.5809': attribute type 41 has an invalid length. [ 1104.973604][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1106.409042][T23868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5817'. [ 1106.808294][T23875] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1106.854243][T23874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5820'. [ 1107.214739][T23886] netlink: 'syz.3.5825': attribute type 11 has an invalid length. [ 1107.348186][T23886] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5825'. [ 1107.430888][T23885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.927529][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5826'. [ 1107.974512][T23898] netlink: 'syz.1.5827': attribute type 41 has an invalid length. [ 1108.244912][T23908] netlink: 'syz.2.5830': attribute type 11 has an invalid length. [ 1108.273501][T23908] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5830'. [ 1108.697576][T23907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.921738][T23920] netlink: 'syz.3.5832': attribute type 11 has an invalid length. [ 1108.948830][T23920] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1109.089613][T23926] netlink: 'syz.1.5842': attribute type 41 has an invalid length. [ 1109.497443][T23919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.710110][T23937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1109.924973][T23940] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5836'. [ 1110.112202][T23945] netlink: 'syz.1.5838': attribute type 11 has an invalid length. [ 1110.149639][T23945] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5838'. [ 1110.639866][T23944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.713858][T23957] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1110.860795][T23963] netlink: 'syz.3.5844': attribute type 11 has an invalid length. [ 1110.884346][T23963] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5844'. [ 1111.087346][T23962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.533815][T23981] netlink: 'syz.1.5850': attribute type 41 has an invalid length. [ 1112.433199][T23989] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1112.598460][T23996] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5853'. [ 1112.844046][T24003] netlink: 'syz.1.5856': attribute type 21 has an invalid length. [ 1113.558203][T24020] netlink: 'syz.1.5860': attribute type 11 has an invalid length. [ 1113.670338][T24020] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5860'. [ 1113.902923][T24021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1113.921055][T24015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.026015][T24027] netlink: 'syz.4.5863': attribute type 41 has an invalid length. [ 1114.527911][T24040] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5865'. [ 1114.966268][T24049] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5867'. [ 1115.663343][T24056] netlink: 'syz.2.5870': attribute type 11 has an invalid length. [ 1115.700857][T24056] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1115.811050][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.817554][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.189138][T24055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.287802][T24067] netlink: 'syz.0.5874': attribute type 11 has an invalid length. [ 1116.309559][T24067] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5874'. [ 1116.687339][T24074] netlink: 'syz.2.5877': attribute type 41 has an invalid length. [ 1116.747218][T24065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.842559][T24079] netlink: 'syz.4.5878': attribute type 41 has an invalid length. [ 1117.219168][T24091] netlink: 'syz.0.5880': attribute type 12 has an invalid length. [ 1117.266770][T24091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5880'. [ 1118.193004][T24094] delete_channel: no stack [ 1118.765532][T24115] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1119.407325][T24132] netlink: 'syz.4.5890': attribute type 11 has an invalid length. [ 1119.415283][T24132] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1119.664487][T24130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.552387][T24152] netlink: 'syz.2.5895': attribute type 12 has an invalid length. [ 1120.592632][T24152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1120.738064][T24154] netlink: 'syz.3.5893': attribute type 41 has an invalid length. [ 1121.107467][T24164] netlink: 'syz.0.5894': attribute type 41 has an invalid length. [ 1121.746388][T24167] delete_channel: no stack [ 1122.038620][T24173] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5898'. [ 1122.078760][T24177] netlink: 'syz.0.5899': attribute type 10 has an invalid length. [ 1122.524833][T24181] delete_channel: no stack [ 1122.589465][T24189] netlink: 'syz.0.5903': attribute type 11 has an invalid length. [ 1122.658418][T24189] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5903'. [ 1122.973494][T24188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1123.049531][ T4278] Bluetooth: hci0: ISO packet for unknown connection handle 1 [ 1124.081066][T24208] netlink: 'syz.0.5910': attribute type 41 has an invalid length. [ 1124.875421][T24224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5913'. [ 1125.060183][T24224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5913'. [ 1125.385368][T24226] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5913'. [ 1125.481520][T24229] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5914'. [ 1125.557450][T14075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1125.566260][T24233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1125.577501][T24233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1125.586410][T24233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1125.596950][T24233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1125.614087][T24233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1125.736286][ T4418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.001284][ T4418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.168962][ T4418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.448104][ T4418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.801157][T24253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1127.034184][T24232] chnl_net:caif_netlink_parms(): no params data found [ 1127.412354][T24232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.419819][T24232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.428781][T24232] device bridge_slave_0 entered promiscuous mode [ 1127.445710][T24232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.453058][T24232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.464068][T24232] device bridge_slave_1 entered promiscuous mode [ 1127.604325][T24232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.673827][T24232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.696980][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 1127.895642][T24232] team0: Port device team_slave_0 added [ 1128.088365][T24232] team0: Port device team_slave_1 added [ 1128.313751][T24232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.333627][T24232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.391951][T24232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.557722][T24232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.564734][T24232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.626210][T24232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.878561][T24232] device hsr_slave_0 entered promiscuous mode [ 1128.899625][T24232] device hsr_slave_1 entered promiscuous mode [ 1128.923108][T24271] netlink: 'syz.0.5923': attribute type 41 has an invalid length. [ 1129.529405][T24282] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5924'. [ 1129.777088][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 1130.049446][T24295] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5926'. [ 1130.438972][T24303] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1131.252847][ T4418] device hsr_slave_0 left promiscuous mode [ 1131.354031][ T4418] device hsr_slave_1 left promiscuous mode [ 1131.460844][ T4418] device bridge_slave_1 left promiscuous mode [ 1131.474739][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.597543][ T4418] device bridge_slave_0 left promiscuous mode [ 1131.608650][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.856848][T14075] Bluetooth: hci1: command 0x040f tx timeout [ 1131.884362][ T4418] device veth1_macvtap left promiscuous mode [ 1131.894320][ T4418] device veth0_macvtap left promiscuous mode [ 1131.908512][ T4418] device veth0_vlan left promiscuous mode [ 1132.559253][ T4418] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1133.180451][ T4418] team0 (unregistering): Port device team_slave_1 removed [ 1133.221818][ T4418] team0 (unregistering): Port device team_slave_0 removed [ 1133.262431][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.572214][ T4418] bond0 (unregistering): (slave team0): Releasing backup interface [ 1133.607469][ T4418] bond0 (unregistering): Released all slaves [ 1133.693358][T24311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5930'. [ 1133.738687][T24329] netlink: 'syz.1.5933': attribute type 10 has an invalid length. [ 1133.859166][T24232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1133.913611][T24347] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1133.947218][T14075] Bluetooth: hci1: command 0x0419 tx timeout [ 1134.013614][T24232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1134.069980][T24232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1134.130354][T24232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1134.260216][T24354] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.5941'. [ 1134.351857][T24232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.409270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1134.420973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1134.444670][T24232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.472808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1134.511970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1134.559941][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.567201][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.631565][T24359] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5940'. [ 1134.661012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1134.669844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1134.699099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1134.727793][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.735023][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.783829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1134.801257][T24373] netlink: 'syz.1.5943': attribute type 11 has an invalid length. [ 1134.815330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1134.835396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1134.861525][T24373] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5943'. [ 1134.877716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1134.950514][T24232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1135.002068][T24232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1135.056909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1135.085078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1135.147635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1135.166356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1135.177031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1135.195729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1135.204882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1135.225836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1135.236221][T24363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.246368][T24376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5946'. [ 1135.339379][T24379] netlink: 'syz.3.5947': attribute type 10 has an invalid length. [ 1135.661828][T24390] netlink: 'syz.0.5959': attribute type 10 has an invalid length. [ 1135.692559][T24392] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5950'. [ 1136.139313][T24401] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1136.202411][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1136.228911][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1136.253954][T24232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.292157][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1136.325060][T24402] delete_channel: no stack [ 1136.337743][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1136.394792][T24402] delete_channel: no stack [ 1136.442952][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1136.452206][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1136.476073][T24232] device veth0_vlan entered promiscuous mode [ 1136.486345][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1136.508401][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1136.544440][T24232] device veth1_vlan entered promiscuous mode [ 1136.611071][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1136.638486][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1136.657548][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1136.677692][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1136.692307][T24413] netlink: 'syz.0.5958': attribute type 11 has an invalid length. [ 1136.705660][T24413] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5958'. [ 1136.717287][T24232] device veth0_macvtap entered promiscuous mode [ 1136.730245][T24232] device veth1_macvtap entered promiscuous mode [ 1136.851360][T24232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.884206][T24232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.916707][T24232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.945966][T24232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.961093][T24232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.972474][T24232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.984556][T24232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.994731][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5960'. [ 1137.011288][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1137.033143][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1137.072024][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1137.138101][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1137.157166][T24232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.177225][T24411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.208850][T24232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.233363][T24232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.254229][T24232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.284591][T24232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.304128][T24232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.318919][T24232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.336254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1137.353468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1137.380260][T24232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.396623][T24232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.415654][T24232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.425249][T24232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.555801][T24432] netlink: 'syz.0.5965': attribute type 10 has an invalid length. [ 1137.638105][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.645988][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.674165][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1137.706467][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.715368][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.727293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1137.900412][T24438] netlink: 'syz.2.5911': attribute type 12 has an invalid length. [ 1138.519038][T24456] netlink: 'syz.1.5972': attribute type 11 has an invalid length. [ 1138.563807][T24437] delete_channel: no stack [ 1138.857242][T24455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.634587][T24479] netlink: 'syz.4.5978': attribute type 10 has an invalid length. [ 1140.184130][T24500] netlink: 'syz.4.5984': attribute type 12 has an invalid length. [ 1140.202472][T24500] __nla_validate_parse: 5 callbacks suppressed [ 1140.202507][T24500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5984'. [ 1140.279725][T24501] netlink: 'syz.2.5981': attribute type 21 has an invalid length. [ 1140.311467][T24501] netlink: 'syz.2.5981': attribute type 1 has an invalid length. [ 1140.321278][T24501] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5981'. [ 1140.670770][T24511] netlink: 'syz.3.5987': attribute type 11 has an invalid length. [ 1140.701399][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1140.713923][T24511] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5987'. [ 1140.721394][T24494] delete_channel: no stack [ 1140.937299][T24510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1140.988309][T24519] netlink: 'syz.4.5989': attribute type 11 has an invalid length. [ 1140.999755][T24519] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5989'. [ 1141.221388][T24518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1141.850228][T24543] netlink: 'syz.3.5999': attribute type 12 has an invalid length. [ 1141.883134][T24543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5999'. [ 1142.143961][T24554] netlink: 'syz.1.6002': attribute type 11 has an invalid length. [ 1142.152237][T24554] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1142.249159][T24556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6001'. [ 1142.540221][T24553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1142.684208][T24549] delete_channel: no stack [ 1142.749059][T24565] netlink: 'syz.2.6005': attribute type 11 has an invalid length. [ 1142.786784][T24565] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6005'. [ 1142.886064][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1143.327346][T24564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.595969][T24589] netlink: 'syz.1.6014': attribute type 21 has an invalid length. [ 1143.621999][T24589] netlink: 'syz.1.6014': attribute type 6 has an invalid length. [ 1143.730100][T24596] netlink: 'syz.4.6016': attribute type 11 has an invalid length. [ 1143.843527][T24595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1144.237450][T24606] netlink: 'syz.4.6018': attribute type 12 has an invalid length. [ 1144.542162][T24610] netlink: 'syz.2.6019': attribute type 11 has an invalid length. [ 1145.779812][T24619] __nla_validate_parse: 4 callbacks suppressed [ 1145.779833][T24619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1145.822248][T24607] delete_channel: no stack [ 1145.863317][T24608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1146.646266][T24633] netlink: 'syz.4.6028': attribute type 11 has an invalid length. [ 1146.687853][T24633] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6028'. [ 1146.789233][T24632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.050384][T14075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1147.063502][T14075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1147.091707][T14075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1147.101415][T14075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1147.109364][T14075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1147.116808][T14075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1147.402112][ T4328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.662500][ T4328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.952655][ T4328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.060179][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1148.363319][ T4328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.455879][T24660] netlink: 'syz.4.6034': attribute type 12 has an invalid length. [ 1148.510375][T24660] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6034'. [ 1148.880055][T24641] chnl_net:caif_netlink_parms(): no params data found [ 1149.046835][T24662] delete_channel: no stack [ 1149.174957][T24674] netlink: 'syz.3.6035': attribute type 11 has an invalid length. [ 1149.217412][T14075] Bluetooth: hci3: command 0x0409 tx timeout [ 1149.261286][T24673] netlink: 'syz.1.6044': attribute type 21 has an invalid length. [ 1149.303246][T24673] netlink: 'syz.1.6044': attribute type 1 has an invalid length. [ 1149.330296][T24674] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6035'. [ 1149.344223][T24673] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6044'. [ 1149.409412][T24672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1149.481618][T24683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.508969][T24683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.600511][T24683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.617807][T24683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.132677][T24688] netlink: 'syz.4.6037': attribute type 21 has an invalid length. [ 1150.302520][T24688] netlink: 'syz.4.6037': attribute type 6 has an invalid length. [ 1150.373197][T24688] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6037'. [ 1150.628704][T24641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.651364][T24709] netlink: 'syz.2.6040': attribute type 11 has an invalid length. [ 1150.668162][T24709] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1150.672712][T24641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.747346][T24641] device bridge_slave_0 entered promiscuous mode [ 1151.237159][T24708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1151.271984][T24641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.287539][T24641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.297006][T14075] Bluetooth: hci3: command 0x041b tx timeout [ 1151.321951][T24641] device bridge_slave_1 entered promiscuous mode [ 1151.390600][T24719] netlink: 'syz.3.6042': attribute type 11 has an invalid length. [ 1151.421840][T24719] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6042'. [ 1151.441153][T24718] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6043'. [ 1151.470355][T24718] bridge_slave_1: default FDB implementation only supports local addresses [ 1152.052342][T24641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.144507][T24641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.502218][T24716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.590273][T24641] team0: Port device team_slave_0 added [ 1152.767999][T24641] team0: Port device team_slave_1 added [ 1153.067758][T24641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.075203][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.201604][T24641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.332105][T24641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.356617][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.386965][T14075] Bluetooth: hci3: command 0x040f tx timeout [ 1153.393240][T24641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.599281][T24641] device hsr_slave_0 entered promiscuous mode [ 1153.650879][T24641] device hsr_slave_1 entered promiscuous mode [ 1153.710284][T24641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1153.730183][T24641] Cannot create hsr debugfs directory [ 1155.277028][T24780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.335526][T24780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.373369][T24787] netlink: 'syz.1.6059': attribute type 11 has an invalid length. [ 1155.461631][T24787] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6059'. [ 1155.469401][T14075] Bluetooth: hci3: command 0x0419 tx timeout [ 1155.614692][T24780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.677252][T24780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.693308][T24784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.423932][T24801] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1156.997437][T24781] netlink: 'syz.3.6056': attribute type 21 has an invalid length. [ 1157.011169][T24781] netlink: 'syz.3.6056': attribute type 6 has an invalid length. [ 1157.042625][T24781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1157.072742][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6058'. [ 1157.201482][ T4328] device hsr_slave_0 left promiscuous mode [ 1157.222259][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.246686][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.275128][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.294605][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.314230][ T4328] device bridge_slave_1 left promiscuous mode [ 1157.327091][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.346295][ T4328] device bridge_slave_0 left promiscuous mode [ 1157.380270][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.477099][ T4328] device veth1_macvtap left promiscuous mode [ 1157.483321][ T4328] device veth0_macvtap left promiscuous mode [ 1157.525668][ T4328] device veth1_vlan left promiscuous mode [ 1159.090552][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.143819][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.381281][ T4328] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1159.454824][ T4328] bond0 (unregistering): Released all slaves [ 1159.497382][T24828] delete_channel: no stack [ 1159.599802][T24829] netlink: 'syz.2.6067': attribute type 12 has an invalid length. [ 1159.620387][T24829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6067'. [ 1159.659842][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6066'. [ 1159.912171][T24847] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6071'. [ 1160.240618][T24851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1160.361331][T24641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1160.380342][T24641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1160.396279][T24641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1160.461103][T24641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1160.733913][T24641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.810038][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1160.839693][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.865489][T24641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.893478][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.912925][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.926984][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.934202][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.953998][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1160.968847][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.983858][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.993922][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.001119][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.011569][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.024192][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.041295][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.054239][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.075818][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1161.089320][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.102596][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.113152][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.126223][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.144438][T24641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1161.159229][T24641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.168503][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1161.179984][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.450870][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6083'. [ 1161.563934][T24873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.674968][T24873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.876066][T24873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.960795][T24873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.862482][T24888] can: request_module (can-proto-0) failed. [ 1162.959207][T24876] netlink: 'syz.2.6074': attribute type 21 has an invalid length. [ 1162.996956][T24876] netlink: 'syz.2.6074': attribute type 6 has an invalid length. [ 1163.004879][T24876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6074'. [ 1163.346828][T24900] netlink: 'syz.4.6079': attribute type 12 has an invalid length. [ 1163.355163][T24900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6079'. [ 1163.547388][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1163.560409][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1163.617253][T24641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.897746][T24899] delete_channel: no stack [ 1163.905528][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1164.103732][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1164.115094][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1164.144198][T24641] device veth0_vlan entered promiscuous mode [ 1164.267549][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1164.283119][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1164.522406][T24641] device veth1_vlan entered promiscuous mode [ 1164.571320][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1164.622873][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1164.697461][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1165.051095][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1165.063466][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1165.091477][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1165.112826][T24641] device veth0_macvtap entered promiscuous mode [ 1165.200482][T24641] device veth1_macvtap entered promiscuous mode [ 1165.340520][T24641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.403583][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1165.429340][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1165.480622][T24641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.513576][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1165.524984][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1165.538899][T24641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.588275][T24641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.626737][T24641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.635561][T24641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.060894][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.108483][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.160838][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1166.207879][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.246563][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.254293][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1166.621128][T24957] netlink: 'syz.0.6023': attribute type 10 has an invalid length. [ 1166.743343][T24957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.768627][T24957] bond0: (slave team0): Enslaving as an active interface with an up link [ 1166.794454][T24965] netlink: 'syz.2.6092': attribute type 2 has an invalid length. [ 1166.841803][T24967] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.6092'. [ 1167.396542][T24973] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1167.447049][T24973] openvswitch: netlink: Message has 6 unknown bytes. [ 1167.620996][T24981] netlink: 'syz.1.6095': attribute type 12 has an invalid length. [ 1167.647560][T24981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6095'. [ 1167.687642][T24982] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1167.889726][T24989] netlink: 'syz.2.6099': attribute type 6 has an invalid length. [ 1167.936715][T24989] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6099'. [ 1168.003311][T24998] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6102'. [ 1168.277586][T24980] delete_channel: no stack [ 1168.584986][T25013] netlink: 'syz.4.6106': attribute type 10 has an invalid length. [ 1168.908671][T25022] netlink: 'syz.3.6107': attribute type 12 has an invalid length. [ 1168.926780][T25022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6107'. [ 1168.954739][T25028] FAULT_INJECTION: forcing a failure. [ 1168.954739][T25028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.019160][T25028] CPU: 1 PID: 25028 Comm: syz.0.6110 Not tainted syzkaller #0 [ 1169.026702][T25028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1169.036793][T25028] Call Trace: [ 1169.040111][T25028] [ 1169.043102][T25028] dump_stack_lvl+0x188/0x24e [ 1169.047923][T25028] ? show_regs_print_info+0x12/0x12 [ 1169.053173][T25028] ? load_image+0x400/0x400 [ 1169.057720][T25028] ? __lock_acquire+0x7d10/0x7d10 [ 1169.062808][T25028] should_fail_ex+0x399/0x4d0 [ 1169.067553][T25028] _copy_from_user+0x2c/0x170 [ 1169.072298][T25028] ___sys_sendmsg+0x1c3/0x360 [ 1169.077047][T25028] ? __sys_sendmsg+0x290/0x290 [ 1169.081897][T25028] ? __lock_acquire+0x7d10/0x7d10 [ 1169.086993][T25028] __se_sys_sendmsg+0x1bb/0x2a0 [ 1169.091909][T25028] ? __x64_sys_sendmsg+0x80/0x80 [ 1169.096943][T25028] ? lockdep_hardirqs_on+0x94/0x140 [ 1169.102184][T25028] do_syscall_64+0x4c/0xa0 [ 1169.106652][T25028] ? clear_bhb_loop+0x60/0xb0 [ 1169.111367][T25028] ? clear_bhb_loop+0x60/0xb0 [ 1169.116108][T25028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.122049][T25028] RIP: 0033:0x7f413d59c799 [ 1169.126501][T25028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.146160][T25028] RSP: 002b:00007f413e532028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.154619][T25028] RAX: ffffffffffffffda RBX: 00007f413d815fa0 RCX: 00007f413d59c799 [ 1169.162647][T25028] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1169.170664][T25028] RBP: 00007f413e532090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.178665][T25028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.186666][T25028] R13: 00007f413d816038 R14: 00007f413d815fa0 R15: 00007ffc08f94088 [ 1169.194692][T25028] [ 1169.284049][T25034] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.6112'. [ 1169.294239][T25034] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1169.750679][T25048] netlink: 'syz.4.6115': attribute type 1 has an invalid length. [ 1169.759800][T25048] netlink: 'syz.4.6115': attribute type 3 has an invalid length. [ 1169.769772][T25048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6115'. [ 1169.796017][T25049] FAULT_INJECTION: forcing a failure. [ 1169.796017][T25049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.812711][T25049] CPU: 1 PID: 25049 Comm: syz.0.6114 Not tainted syzkaller #0 [ 1169.820232][T25049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1169.830325][T25049] Call Trace: [ 1169.833635][T25049] [ 1169.836602][T25049] dump_stack_lvl+0x188/0x24e [ 1169.841326][T25049] ? show_regs_print_info+0x12/0x12 [ 1169.846554][T25049] ? load_image+0x400/0x400 [ 1169.851086][T25049] ? __lock_acquire+0x7d10/0x7d10 [ 1169.856163][T25049] ? unix_ioctl+0x25d/0x660 [ 1169.860725][T25049] should_fail_ex+0x399/0x4d0 [ 1169.865436][T25049] _copy_from_user+0x2c/0x170 [ 1169.870152][T25049] sock_do_ioctl+0x18c/0x320 [ 1169.874791][T25049] ? sock_show_fdinfo+0xb0/0xb0 [ 1169.879700][T25049] sock_ioctl+0x4d2/0x710 [ 1169.884087][T25049] ? sock_poll+0x410/0x410 [ 1169.888559][T25049] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1169.893568][T25049] ? security_file_ioctl+0x7c/0xa0 [ 1169.898734][T25049] ? sock_poll+0x410/0x410 [ 1169.903188][T25049] __se_sys_ioctl+0xfa/0x170 [ 1169.907826][T25049] do_syscall_64+0x4c/0xa0 [ 1169.912282][T25049] ? clear_bhb_loop+0x60/0xb0 [ 1169.917004][T25049] ? clear_bhb_loop+0x60/0xb0 [ 1169.921732][T25049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.927666][T25049] RIP: 0033:0x7f413d59c799 [ 1169.932113][T25049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.951778][T25049] RSP: 002b:00007f413e4f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.960229][T25049] RAX: ffffffffffffffda RBX: 00007f413d816180 RCX: 00007f413d59c799 [ 1169.968223][T25049] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000011 [ 1169.976234][T25049] RBP: 00007f413e4f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.984237][T25049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.992235][T25049] R13: 00007f413d816218 R14: 00007f413d816180 R15: 00007ffc08f94088 [ 1170.000245][T25049] [ 1172.322217][T25021] delete_channel: no stack [ 1172.482202][T25053] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1172.788978][T25063] device syzkaller0 entered promiscuous mode [ 1175.584612][T25073] netlink: 'syz.3.6122': attribute type 10 has an invalid length. [ 1175.794064][T25103] netlink: 'syz.2.6129': attribute type 12 has an invalid length. [ 1175.826800][T25103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6129'. [ 1176.780205][T25127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6136'. [ 1177.221006][T25136] netlink: 'syz.0.6141': attribute type 2 has an invalid length. [ 1177.239599][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.246264][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.393760][T25129] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1177.649351][T25139] netlink: 'syz.4.6142': attribute type 1 has an invalid length. [ 1177.716946][T25139] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1177.720477][T25145] netlink: 'syz.1.6143': attribute type 27 has an invalid length. [ 1178.113737][T25151] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6146'. [ 1178.187352][T25160] netlink: 'syz.4.6147': attribute type 12 has an invalid length. [ 1178.195527][T25160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6147'. [ 1178.746117][T25177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1179.172994][T25187] netlink: 'syz.1.6156': attribute type 10 has an invalid length. [ 1180.494999][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1180.510271][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1180.518629][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1180.532146][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1180.552004][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1180.561019][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1180.999387][ T4343] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.199996][T25214] netlink: 'syz.3.6166': attribute type 12 has an invalid length. [ 1181.233527][T25214] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1181.481034][ T4343] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.522661][T25200] chnl_net:caif_netlink_parms(): no params data found [ 1181.589096][T25231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1181.610148][ T4343] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.773935][ T4343] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.042510][T25200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.083520][T25200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.162785][T25200] device bridge_slave_0 entered promiscuous mode [ 1182.261541][T25200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.268848][T25200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.277158][T25200] device bridge_slave_1 entered promiscuous mode [ 1182.518661][T25200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.553642][T25200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.657190][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 1182.683794][ T4343] device 0 left promiscuous mode [ 1182.947402][T25200] team0: Port device team_slave_0 added [ 1182.978881][T25256] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1183.132751][T25200] team0: Port device team_slave_1 added [ 1183.185244][T25262] netlink: 'syz.0.6180': attribute type 12 has an invalid length. [ 1183.205943][T25262] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6180'. [ 1183.355030][T25200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.370966][T25200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.430858][T25200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.469430][T25200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.487875][T25200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.566746][T25200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.650066][T25275] netlink: 'syz.3.6182': attribute type 2 has an invalid length. [ 1183.681017][T25275] netlink: 'syz.3.6182': attribute type 8 has an invalid length. [ 1183.730379][T25275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6182'. [ 1183.750788][T25278] device sit0 left promiscuous mode [ 1184.008252][T25267] device sit0 entered promiscuous mode [ 1184.254136][T25200] device hsr_slave_0 entered promiscuous mode [ 1184.274332][T25200] device hsr_slave_1 entered promiscuous mode [ 1184.298082][T25200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1184.305683][T25200] Cannot create hsr debugfs directory [ 1184.736771][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 1184.934732][T25309] FAULT_INJECTION: forcing a failure. [ 1184.934732][T25309] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.974970][T25309] CPU: 0 PID: 25309 Comm: syz.1.6189 Not tainted syzkaller #0 [ 1184.982609][T25309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1184.992728][T25309] Call Trace: [ 1184.996077][T25309] [ 1184.999044][T25309] dump_stack_lvl+0x188/0x24e [ 1185.003792][T25309] ? show_regs_print_info+0x12/0x12 [ 1185.009054][T25309] ? load_image+0x400/0x400 [ 1185.013781][T25309] ? __might_sleep+0xd0/0xd0 [ 1185.018426][T25309] ? __lock_acquire+0x7d10/0x7d10 [ 1185.023501][T25309] ? ct_irq_exit_irqson+0x113/0x170 [ 1185.028745][T25309] should_fail_ex+0x399/0x4d0 [ 1185.033471][T25309] should_failslab+0x5/0x20 [ 1185.038027][T25309] slab_pre_alloc_hook+0x59/0x310 [ 1185.043099][T25309] ? exc_page_fault+0x88/0x100 [ 1185.047902][T25309] ? sk_prot_alloc+0xe7/0x210 [ 1185.052630][T25309] __kmem_cache_alloc_node+0x4f/0x260 [ 1185.058058][T25309] ? exc_page_fault+0x88/0x100 [ 1185.062868][T25309] ? sk_prot_alloc+0xe7/0x210 [ 1185.067593][T25309] __kmalloc+0xa0/0x240 [ 1185.071795][T25309] sk_prot_alloc+0xe7/0x210 [ 1185.076332][T25309] ? sk_alloc+0x20/0x340 [ 1185.080608][T25309] sk_alloc+0x36/0x340 [ 1185.084709][T25309] ? bpf_ctx_init+0x163/0x1a0 [ 1185.089415][T25309] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1185.095006][T25309] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1185.100458][T25309] ? __fget_files+0x28/0x4b0 [ 1185.105097][T25309] ? __fget_files+0x43d/0x4b0 [ 1185.109831][T25309] ? cpu_online+0xa0/0xa0 [ 1185.114245][T25309] bpf_prog_test_run+0x31e/0x390 [ 1185.119253][T25309] __sys_bpf+0x62b/0x780 [ 1185.123546][T25309] ? bpf_link_show_fdinfo+0x380/0x380 [ 1185.129000][T25309] ? lock_chain_count+0x20/0x20 [ 1185.133919][T25309] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1185.139959][T25309] __x64_sys_bpf+0x78/0x90 [ 1185.144430][T25309] do_syscall_64+0x4c/0xa0 [ 1185.148902][T25309] ? clear_bhb_loop+0x60/0xb0 [ 1185.153631][T25309] ? clear_bhb_loop+0x60/0xb0 [ 1185.158367][T25309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1185.164311][T25309] RIP: 0033:0x7fb238d9c799 [ 1185.168767][T25309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.188414][T25309] RSP: 002b:00007fb239cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1185.196876][T25309] RAX: ffffffffffffffda RBX: 00007fb239015fa0 RCX: 00007fb238d9c799 [ 1185.204881][T25309] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1185.212892][T25309] RBP: 00007fb239cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.220903][T25309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.228911][T25309] R13: 00007fb239016038 R14: 00007fb239015fa0 R15: 00007ffc3eb186c8 [ 1185.237027][T25309] [ 1185.832199][T25327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6192'. [ 1185.995227][T25333] netlink: 'syz.2.6194': attribute type 12 has an invalid length. [ 1186.021841][T25333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6194'. [ 1186.254968][T25200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1186.371155][T25334] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6193'. [ 1186.501198][T25200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1186.559260][T25200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1186.784021][ T4343] team0: Port device wlan1 removed [ 1186.815360][T25200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1186.822955][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 1187.182109][ T4343] device hsr_slave_0 left promiscuous mode [ 1187.205942][ T4343] device hsr_slave_1 left promiscuous mode [ 1187.245770][ T4343] device bridge_slave_1 left promiscuous mode [ 1187.259326][T25358] netlink: 'syz.0.6198': attribute type 7 has an invalid length. [ 1187.276763][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.284705][T25358] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.6198'. [ 1187.297614][ T4343] device bridge_slave_0 left promiscuous mode [ 1187.303904][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.395326][ T4343] device veth0_macvtap left promiscuous mode [ 1187.814548][ T4343] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1188.411162][ T4343] team0 (unregistering): Port device team_slave_1 removed [ 1188.460066][ T4343] team0 (unregistering): Port device team_slave_0 removed [ 1188.510497][ T4343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.797033][ T4343] bond0 (unregistering): (slave team0): Releasing backup interface [ 1188.833217][ T4343] bond0 (unregistering): Released all slaves [ 1188.907330][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 1188.951788][T25200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.003845][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1189.033077][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1189.062701][T25200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.111140][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1189.139879][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1189.167396][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.174572][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.215847][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1189.254491][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1189.263687][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1189.314178][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.321438][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.393579][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1189.489604][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1189.562123][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1189.593261][T25391] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6208'. [ 1189.605236][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1189.692056][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1189.743399][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1189.794662][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1189.848634][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1189.911213][T25400] netlink: 'syz.3.6211': attribute type 10 has an invalid length. [ 1189.984324][T25407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6212'. [ 1190.050538][T25400] team0: Port device wlan1 removed [ 1190.072821][T25200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.097695][T25200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1190.121432][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1190.132899][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1190.217939][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1190.232181][T25407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6212'. [ 1190.269189][T25408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6212'. [ 1190.385169][T25415] netlink: 'syz.3.6213': attribute type 10 has an invalid length. [ 1190.435395][T25415] device veth0_macvtap left promiscuous mode [ 1190.638166][T25420] netlink: 'syz.0.6215': attribute type 12 has an invalid length. [ 1190.646836][T25420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6215'. [ 1190.931225][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1190.946889][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1190.984230][T25200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.243529][T25471] netlink: 'syz.1.6223': attribute type 2 has an invalid length. [ 1192.266880][T25471] netlink: 'syz.1.6223': attribute type 8 has an invalid length. [ 1192.317440][T25471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1192.416349][T25475] device sit0 left promiscuous mode [ 1192.630445][T25478] device sit0 entered promiscuous mode [ 1192.729739][T25484] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6224'. [ 1193.413015][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1193.433060][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1193.506889][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1193.536130][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1193.617010][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1193.625929][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1193.658854][T25200] device veth0_vlan entered promiscuous mode [ 1193.683662][T25200] device veth1_vlan entered promiscuous mode [ 1193.790164][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1193.827997][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1193.836347][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1193.898825][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1193.937991][T25200] device veth0_macvtap entered promiscuous mode [ 1193.966007][T25494] netlink: 'syz.0.6227': attribute type 7 has an invalid length. [ 1194.015691][T25494] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1194.124831][T25501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1194.213298][T25494] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1194.226385][T25200] device veth1_macvtap entered promiscuous mode [ 1194.237991][T25494] netlink: zone id is out of range [ 1194.257426][T25494] netlink: zone id is out of range [ 1194.264586][T25502] netlink: 'syz.3.6229': attribute type 12 has an invalid length. [ 1194.285490][T25494] netlink: zone id is out of range [ 1194.295608][T25502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6229'. [ 1194.307922][T25494] netlink: zone id is out of range [ 1194.325924][T25494] netlink: zone id is out of range [ 1194.338330][T25494] netlink: zone id is out of range [ 1194.346851][T25494] netlink: zone id is out of range [ 1194.352146][T25494] netlink: zone id is out of range [ 1194.389932][T25200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.436737][T25494] netlink: zone id is out of range [ 1194.442056][T25494] netlink: zone id is out of range [ 1194.449395][T25200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.503808][T25513] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6238'. [ 1194.517481][T25200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.524879][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1194.564592][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1194.605623][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1194.638736][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1194.679458][T25514] netlink: 'syz.1.6230': attribute type 10 has an invalid length. [ 1194.710979][T25200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.755588][T25200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.791982][T25200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.817586][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1194.845291][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1194.976335][T25200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.016661][T25200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.037712][T25200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.057923][T25200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.626985][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.634846][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.681035][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1195.723724][T25545] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6235'. [ 1195.736394][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.751724][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.771984][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1196.060653][T25555] device syzkaller0 entered promiscuous mode [ 1197.745144][T14075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1197.759638][T14075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1197.770318][T14075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1197.782869][T14075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1197.790617][T14075] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1197.800835][T14075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1198.613213][T25587] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1199.870711][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 1200.324599][T25566] device sit0 entered promiscuous mode [ 1200.569302][T25596] netlink: 'syz.4.6245': attribute type 10 has an invalid length. [ 1200.661897][T25596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.678241][T25596] bond0: (slave team0): Enslaving as an active interface with an up link [ 1200.726021][T25600] netlink: 'syz.3.6247': attribute type 3 has an invalid length. [ 1200.786185][ T4328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.871018][T25606] device pim6reg1 entered promiscuous mode [ 1201.075323][ T4328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.287859][ T4328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.512857][ T4328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.604562][T25621] netlink: 'syz.3.6254': attribute type 12 has an invalid length. [ 1201.620725][T25621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1201.672456][T25625] netlink: 'syz.0.6255': attribute type 12 has an invalid length. [ 1201.746455][T25625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6255'. [ 1201.907075][T25573] chnl_net:caif_netlink_parms(): no params data found [ 1201.947282][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 1202.593239][T25643] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1202.615412][T25573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.640252][T25573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.668211][T25573] device bridge_slave_0 entered promiscuous mode [ 1202.840232][T25573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.864862][T25573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.892454][T25573] device bridge_slave_1 entered promiscuous mode [ 1203.072126][T25573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.087543][T25652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6268'. [ 1203.281044][T25657] netlink: 'syz.4.6259': attribute type 2 has an invalid length. [ 1203.338185][T25657] netlink: 'syz.4.6259': attribute type 8 has an invalid length. [ 1203.378084][T25657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1203.545889][T25676] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6271'. [ 1203.560613][T25573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.634968][T25665] device sit0 entered promiscuous mode [ 1203.963922][T25677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6262'. [ 1204.016853][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 1204.071773][T25573] team0: Port device team_slave_0 added [ 1204.082312][T25573] team0: Port device team_slave_1 added [ 1204.157982][T25573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.164994][T25573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.195854][T25573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.266855][T25573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.273949][T25573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.339321][T25573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.447357][T25694] device pim6reg1 entered promiscuous mode [ 1204.651100][T25573] device hsr_slave_0 entered promiscuous mode [ 1204.703037][T25573] device hsr_slave_1 entered promiscuous mode [ 1204.731599][T25573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1204.766757][T25573] Cannot create hsr debugfs directory [ 1204.784789][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6276'. [ 1205.616388][ T4328] device hsr_slave_0 left promiscuous mode [ 1205.629069][ T4328] device bridge_slave_1 left promiscuous mode [ 1205.635528][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.686447][ T4328] device bridge_slave_0 left promiscuous mode [ 1205.696195][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.739478][ T4328] device veth0_macvtap left promiscuous mode [ 1206.099181][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 1206.241935][T25735] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6275'. [ 1206.567503][T25744] netlink: 'syz.2.6277': attribute type 29 has an invalid length. [ 1206.605221][T25744] netlink: 'syz.2.6277': attribute type 3 has an invalid length. [ 1206.617313][T25744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1206.923116][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.380481][ T4328] bond0 (unregistering): Released all slaves [ 1208.132732][T25724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6273'. [ 1208.156158][T25725] netlink: 'syz.3.6274': attribute type 10 has an invalid length. [ 1209.230167][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6281'. [ 1209.674020][T25775] netlink: 'syz.3.6286': attribute type 10 has an invalid length. [ 1209.743038][T25777] FAULT_INJECTION: forcing a failure. [ 1209.743038][T25777] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.769323][T25777] CPU: 1 PID: 25777 Comm: syz.0.6287 Not tainted syzkaller #0 [ 1209.773140][T25779] netlink: 'syz.2.6288': attribute type 2 has an invalid length. [ 1209.776862][T25777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.776878][T25777] Call Trace: [ 1209.776892][T25777] [ 1209.776901][T25777] dump_stack_lvl+0x188/0x24e [ 1209.805630][T25777] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1209.811829][T25777] ? show_regs_print_info+0x12/0x12 [ 1209.817087][T25777] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1209.823271][T25777] ? dump_stack+0x5/0x12 [ 1209.827546][T25777] should_fail_ex+0x399/0x4d0 [ 1209.832296][T25777] should_failslab+0x5/0x20 [ 1209.836823][T25777] slab_pre_alloc_hook+0x59/0x310 [ 1209.841874][T25777] ? sk_prot_alloc+0xe7/0x210 [ 1209.846589][T25777] __kmem_cache_alloc_node+0x4f/0x260 [ 1209.851980][T25777] ? sk_prot_alloc+0xe7/0x210 [ 1209.856672][T25777] __kmalloc+0xa0/0x240 [ 1209.860858][T25777] sk_prot_alloc+0xe7/0x210 [ 1209.865396][T25777] ? sk_alloc+0x20/0x340 [ 1209.869661][T25777] sk_alloc+0x36/0x340 [ 1209.873759][T25777] ? bpf_ctx_init+0x163/0x1a0 [ 1209.878459][T25777] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1209.884035][T25777] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1209.889436][T25777] ? __fget_files+0x28/0x4b0 [ 1209.894065][T25777] ? __fget_files+0x43d/0x4b0 [ 1209.898785][T25777] ? cpu_online+0xa0/0xa0 [ 1209.903146][T25777] bpf_prog_test_run+0x31e/0x390 [ 1209.908126][T25777] __sys_bpf+0x62b/0x780 [ 1209.912442][T25777] ? bpf_link_show_fdinfo+0x380/0x380 [ 1209.917840][T25777] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1209.924038][T25777] __x64_sys_bpf+0x78/0x90 [ 1209.928480][T25777] do_syscall_64+0x4c/0xa0 [ 1209.932919][T25777] ? clear_bhb_loop+0x60/0xb0 [ 1209.937631][T25777] ? clear_bhb_loop+0x60/0xb0 [ 1209.942330][T25777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1209.948241][T25777] RIP: 0033:0x7f413d59c799 [ 1209.952673][T25777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.972323][T25777] RSP: 002b:00007f413e532028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1209.980752][T25777] RAX: ffffffffffffffda RBX: 00007f413d815fa0 RCX: 00007f413d59c799 [ 1209.988778][T25777] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1209.996816][T25777] RBP: 00007f413e532090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.004811][T25777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.012806][T25777] R13: 00007f413d816038 R14: 00007f413d815fa0 R15: 00007ffc08f94088 [ 1210.020823][T25777] [ 1210.116075][T25781] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6288'. [ 1210.660080][T25797] netlink: 'syz.3.6291': attribute type 12 has an invalid length. [ 1210.677970][T25797] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6291'. [ 1210.734226][T25573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1210.757490][T25800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6290'. [ 1210.797668][T25573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1210.863098][T25573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1210.930810][T25804] netlink: 'syz.4.6292': attribute type 10 has an invalid length. [ 1211.044268][T25573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1211.263277][T25573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.326436][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1211.349850][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1211.415793][T25818] netlink: 'syz.3.6295': attribute type 13 has an invalid length. [ 1211.446995][T25818] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1211.464793][T25815] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6293'. [ 1211.488260][T25818] syz_tun: refused to change device tx_queue_len [ 1211.510220][T25818] net_ratelimit: 12 callbacks suppressed [ 1211.510238][T25818] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1211.607199][T25812] netlink: 'syz.3.6295': attribute type 13 has an invalid length. [ 1211.615303][T25812] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1211.672270][T25812] syz_tun: refused to change device tx_queue_len [ 1211.715821][T25812] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1211.770840][T25573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.788416][T25814] netlink: 'syz.4.6294': attribute type 10 has an invalid length. [ 1211.814434][T25823] netlink: 'syz.3.6295': attribute type 10 has an invalid length. [ 1211.895277][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1211.924192][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1211.980968][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.988196][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.085353][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1212.220693][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1212.281492][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1212.351930][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.359211][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.515400][T25842] netlink: 'syz.4.6300': attribute type 3 has an invalid length. [ 1212.534551][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1212.556842][T25842] netlink: 'syz.4.6300': attribute type 1 has an invalid length. [ 1212.571179][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1212.616074][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1212.624738][T25842] netlink: 40687 bytes leftover after parsing attributes in process `syz.4.6300'. [ 1212.664784][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1212.711797][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1212.742601][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1212.784224][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1212.820210][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1212.829094][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1212.837827][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1212.846664][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1212.857955][T25573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1213.096212][T25839] delete_channel: no stack [ 1213.301028][T25861] netlink: 'syz.4.6303': attribute type 10 has an invalid length. [ 1213.404637][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6302'. [ 1213.510028][T25860] netlink: 'syz.2.6304': attribute type 10 has an invalid length. [ 1213.632339][T25860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.691812][T25860] bond0: (slave team0): Enslaving as an active interface with an up link [ 1213.790218][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1213.798412][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1213.821557][T25573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1213.877872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1213.907572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1213.973670][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1213.993046][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1214.023386][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1214.053560][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1214.085300][T25573] device veth0_vlan entered promiscuous mode [ 1214.130838][T25573] device veth1_vlan entered promiscuous mode [ 1214.249528][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1214.268876][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1214.307308][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1214.354650][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1214.385963][T25573] device veth0_macvtap entered promiscuous mode [ 1214.400882][T25888] netlink: 'syz.2.6309': attribute type 10 has an invalid length. [ 1214.504206][T25896] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6308'. [ 1214.552938][T25893] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6311'. [ 1214.614327][T25573] device veth1_macvtap entered promiscuous mode [ 1214.633420][T25899] netlink: 'syz.4.6311': attribute type 10 has an invalid length. [ 1214.672168][T25899] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6311'. [ 1214.811499][T25898] netlink: 'syz.3.6310': attribute type 10 has an invalid length. [ 1214.844324][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1214.858309][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1214.902477][T25573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.929389][T25573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.940241][T25573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.951038][T25573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.963493][T25573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.006860][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1215.056497][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1215.072462][T25573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.109431][T25573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.156568][T25573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1215.172605][T25573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.230189][T25573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.250129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1215.270279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.355497][T25573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.417095][T25573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.493208][T25573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.549764][T25573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.581744][T25912] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1216.173575][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.196631][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.231554][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1216.270255][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.315528][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.352510][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1216.484618][T25938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6315'. [ 1216.944931][T25951] validate_nla: 1 callbacks suppressed [ 1216.944967][T25951] netlink: 'syz.2.6318': attribute type 10 has an invalid length. [ 1217.096079][T25959] netlink: 'syz.1.6322': attribute type 10 has an invalid length. [ 1217.215421][T25959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.274113][T25959] bond0: (slave team0): Enslaving as an active interface with an up link [ 1217.595693][T25965] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1217.998724][T14075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1218.008301][T14075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1218.020581][T14075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1218.070182][T14075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1218.078551][T14075] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1218.085792][T14075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1218.191720][T25987] FAULT_INJECTION: forcing a failure. [ 1218.191720][T25987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.266822][T25987] CPU: 0 PID: 25987 Comm: syz.2.6329 Not tainted syzkaller #0 [ 1218.274360][T25987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1218.284445][T25987] Call Trace: [ 1218.287763][T25987] [ 1218.290736][T25987] dump_stack_lvl+0x188/0x24e [ 1218.295465][T25987] ? show_regs_print_info+0x12/0x12 [ 1218.300708][T25987] ? load_image+0x400/0x400 [ 1218.305250][T25987] ? __lock_acquire+0x7d10/0x7d10 [ 1218.310328][T25987] ? __might_fault+0x4e/0x120 [ 1218.315044][T25987] should_fail_ex+0x399/0x4d0 [ 1218.319760][T25987] _copy_from_user+0x2c/0x170 [ 1218.324487][T25987] ___sys_sendmsg+0x1c3/0x360 [ 1218.329212][T25987] ? __sys_sendmsg+0x290/0x290 [ 1218.334018][T25987] ? __lock_acquire+0x7d10/0x7d10 [ 1218.339091][T25987] __se_sys_sendmsg+0x1bb/0x2a0 [ 1218.344009][T25987] ? ct_nmi_exit+0x145/0x1c0 [ 1218.348633][T25987] ? __x64_sys_sendmsg+0x80/0x80 [ 1218.353616][T25987] ? lockdep_hardirqs_on+0x94/0x140 [ 1218.358836][T25987] do_syscall_64+0x4c/0xa0 [ 1218.363279][T25987] ? clear_bhb_loop+0x60/0xb0 [ 1218.367987][T25987] ? clear_bhb_loop+0x60/0xb0 [ 1218.372697][T25987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.378646][T25987] RIP: 0033:0x7f999759c799 [ 1218.383081][T25987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.402840][T25987] RSP: 002b:00007f99957f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.411284][T25987] RAX: ffffffffffffffda RBX: 00007f9997815fa0 RCX: 00007f999759c799 [ 1218.419286][T25987] RDX: 0000000020040056 RSI: 0000200000000100 RDI: 0000000000000005 [ 1218.427294][T25987] RBP: 00007f99957f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.435277][T25987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.443285][T25987] R13: 00007f9997816038 R14: 00007f9997815fa0 R15: 00007fff52262538 [ 1218.451308][T25987] [ 1218.466401][T25988] netlink: 'syz.1.6327': attribute type 2 has an invalid length. [ 1218.525521][T25988] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6327'. [ 1218.966083][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6331'. [ 1218.996933][T26000] netlink: 'syz.4.6332': attribute type 12 has an invalid length. [ 1219.015405][T26000] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6332'. [ 1219.176304][T25980] chnl_net:caif_netlink_parms(): no params data found [ 1219.619402][ T4419] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.656958][T26021] netlink: 'syz.4.6336': attribute type 10 has an invalid length. [ 1219.753014][T26027] netlink: 'syz.0.6337': attribute type 10 has an invalid length. [ 1219.874776][ T4419] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.995600][T25980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.002986][T25980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.020666][T25980] device bridge_slave_0 entered promiscuous mode [ 1220.085373][ T4419] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.176866][T14075] Bluetooth: hci2: command 0x0409 tx timeout [ 1220.250412][T25980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.281295][ C0] ================================================================== [ 1220.289412][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1220.297235][ C0] Write of size 64 at addr ffff888023c33090 by task syz.0.6339/26038 [ 1220.305304][ C0] [ 1220.307640][ C0] CPU: 0 PID: 26038 Comm: syz.0.6339 Not tainted syzkaller #0 [ 1220.315105][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1220.325176][ C0] Call Trace: [ 1220.328468][ C0] [ 1220.331327][ C0] dump_stack_lvl+0x188/0x24e [ 1220.336017][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1220.341058][ C0] ? show_regs_print_info+0x12/0x12 [ 1220.346268][ C0] ? load_image+0x400/0x400 [ 1220.350782][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1220.356252][ C0] ? __virt_addr_valid+0x188/0x540 [ 1220.361395][ C0] ? __virt_addr_valid+0x465/0x540 [ 1220.366555][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 1220.371679][ C0] print_report+0xa8/0x210 [ 1220.376105][ C0] kasan_report+0x10b/0x140 [ 1220.380624][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 1220.385771][ C0] kasan_check_range+0x235/0x290 [ 1220.390721][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 1220.395874][ C0] memcpy+0x3c/0x60 [ 1220.399696][ C0] __bpf_get_stackid+0x6c9/0x920 [ 1220.404659][ C0] bpf_get_stackid_pe+0x33f/0x400 [ 1220.409723][ C0] bpf_prog_709c33675fcd9051+0x21/0x36 [ 1220.415200][ C0] bpf_overflow_handler+0x522/0x7c0 [ 1220.420447][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 1220.425744][ C0] ? perf_event_switch_output+0x760/0x760 [ 1220.431476][ C0] ? sched_clock_cpu+0x6e/0x260 [ 1220.436344][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1220.442609][ C0] __perf_event_overflow+0x448/0x610 [ 1220.447933][ C0] perf_swevent_hrtimer+0x3ef/0x590 [ 1220.453159][ C0] ? cpu_clock_event_read+0x50/0x50 [ 1220.458384][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1220.464294][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1220.469166][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 1220.474385][ C0] ? cpu_clock_event_read+0x50/0x50 [ 1220.479601][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1220.484736][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 1220.489694][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1220.495696][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1220.501343][ C0] [ 1220.504280][ C0] [ 1220.507217][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1220.513212][ C0] RIP: 0010:perf_pending_task+0x7d/0x470 [ 1220.518860][ C0] Code: 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ba 6d 2b 00 4d 8b 3e 65 8b 05 48 7f 5a 7e 41 89 c6 4c 89 f6 48 81 e6 00 00 f0 00 <40> 0f 95 c5 31 ff e8 78 86 da ff 4c 89 f6 48 81 e6 00 00 ff 00 41 [ 1220.538477][ C0] RSP: 0018:ffffc90003577dc0 EFLAGS: 00000246 [ 1220.544554][ C0] RAX: 0000000080000001 RBX: ffff88805ed46a58 RCX: 0000000000080000 [ 1220.552544][ C0] RDX: ffffc90019ea9000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1220.560615][ C0] RBP: 0000000000000000 R08: ffff8880330ee343 R09: 1ffff1100661dc68 [ 1220.568599][ C0] R10: dffffc0000000000 R11: ffffed100661dc69 R12: dffffc0000000000 [ 1220.576583][ C0] R13: dffffc0000000000 R14: 0000000080000001 R15: ffff8880b8e00000 [ 1220.584574][ C0] task_work_run+0x1d0/0x260 [ 1220.589184][ C0] ? task_work_cancel+0x220/0x220 [ 1220.594225][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1220.599697][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 1220.604993][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1220.610565][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1220.616034][ C0] do_syscall_64+0x58/0xa0 [ 1220.620469][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1220.625184][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1220.629883][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.635783][ C0] RIP: 0033:0x7f413d59c799 [ 1220.640203][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.659810][ C0] RSP: 002b:00007f413e5320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1220.668234][ C0] RAX: 0000000000000001 RBX: 00007f413d815fa8 RCX: 00007f413d59c799 [ 1220.676227][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f413d815fac [ 1220.684211][ C0] RBP: 00007f413d815fa0 R08: 000d414ba3a4c9b2 R09: 0000000000000000 [ 1220.692212][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.700372][ C0] R13: 00007f413d816038 R14: 00007ffc08f93fa0 R15: 00007ffc08f94088 [ 1220.708360][ C0] [ 1220.711393][ C0] [ 1220.713743][ C0] Allocated by task 26038: [ 1220.718169][ C0] kasan_set_track+0x4b/0x70 [ 1220.722793][ C0] __kasan_kmalloc+0x8e/0xa0 [ 1220.727400][ C0] __kmalloc_node+0xb0/0x240 [ 1220.732006][ C0] bpf_map_area_alloc+0x47/0xe0 [ 1220.736872][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 1220.742596][ C0] stack_map_alloc+0x390/0x520 [ 1220.747373][ C0] map_create+0x534/0x1000 [ 1220.751806][ C0] __sys_bpf+0x38b/0x780 [ 1220.756060][ C0] __x64_sys_bpf+0x78/0x90 [ 1220.760492][ C0] do_syscall_64+0x4c/0xa0 [ 1220.764926][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.770867][ C0] [ 1220.773204][ C0] Last potentially related work creation: [ 1220.778950][ C0] kasan_save_stack+0x3a/0x60 [ 1220.783647][ C0] __kasan_record_aux_stack+0xb2/0xc0 [ 1220.789035][ C0] call_rcu+0x14f/0x990 [ 1220.793223][ C0] nf_unregister_net_hooks+0xc7/0x130 [ 1220.798622][ C0] brnf_exit_net+0x5d/0x120 [ 1220.803140][ C0] cleanup_net+0x706/0xba0 [ 1220.807598][ C0] process_one_work+0x8a2/0x1160 [ 1220.812552][ C0] worker_thread+0xaa2/0x1270 [ 1220.817249][ C0] kthread+0x29d/0x330 [ 1220.821328][ C0] ret_from_fork+0x1f/0x30 [ 1220.825762][ C0] [ 1220.828103][ C0] Second to last potentially related work creation: [ 1220.834688][ C0] kasan_save_stack+0x3a/0x60 [ 1220.839377][ C0] __kasan_record_aux_stack+0xb2/0xc0 [ 1220.844753][ C0] call_rcu+0x14f/0x990 [ 1220.848926][ C0] __nf_register_net_hook+0x788/0x910 [ 1220.854320][ C0] nf_register_net_hook+0xae/0x190 [ 1220.859442][ C0] nf_register_net_hooks+0x40/0x1a0 [ 1220.864651][ C0] nf_ct_netns_do_get+0x3bc/0x5b0 [ 1220.869724][ C0] nf_ct_netns_inet_get+0x1f/0x150 [ 1220.874864][ C0] nf_conncount_init+0x123/0x380 [ 1220.879826][ C0] ovs_ct_init+0x312/0x480 [ 1220.884250][ C0] ovs_init_net+0x1e2/0x240 [ 1220.888763][ C0] ops_init+0x355/0x5f0 [ 1220.892940][ C0] setup_net+0x4f2/0xbd0 [ 1220.897237][ C0] copy_net_ns+0x348/0x5b0 [ 1220.901668][ C0] create_new_namespaces+0x3d3/0x6f0 [ 1220.906964][ C0] unshare_nsproxy_namespaces+0x116/0x160 [ 1220.912729][ C0] ksys_unshare+0x4ca/0x8b0 [ 1220.917280][ C0] __x64_sys_unshare+0x34/0x40 [ 1220.922051][ C0] do_syscall_64+0x4c/0xa0 [ 1220.926475][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.932375][ C0] [ 1220.934706][ C0] The buggy address belongs to the object at ffff888023c33080 [ 1220.934706][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 1220.948854][ C0] The buggy address is located 16 bytes inside of [ 1220.948854][ C0] 64-byte region [ffff888023c33080, ffff888023c330c0) [ 1220.962068][ C0] [ 1220.964408][ C0] The buggy address belongs to the physical page: [ 1220.970923][ C0] page:ffffea00008f0cc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23c33 [ 1220.981095][ C0] memcg:ffff88802840ce01 [ 1220.985348][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1220.992925][ C0] raw: 00fff00000000200 ffffea0000d25a80 dead000000000003 ffff888017442780 [ 1221.001525][ C0] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802840ce01 [ 1221.010122][ C0] page dumped because: kasan: bad access detected [ 1221.016587][ C0] page_owner tracks the page as allocated [ 1221.022310][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 9999, tgid 9997 (syz.4.1740), ts 398843811210, free_ts 398748021250 [ 1221.040552][ C0] post_alloc_hook+0x173/0x1a0 [ 1221.045349][ C0] get_page_from_freelist+0x1a1e/0x1ab0 [ 1221.050920][ C0] __alloc_pages+0x1ec/0x4f0 [ 1221.055616][ C0] alloc_slab_page+0x5d/0x160 [ 1221.060312][ C0] new_slab+0x87/0x2c0 [ 1221.064421][ C0] ___slab_alloc+0xbc6/0x1240 [ 1221.069116][ C0] __kmem_cache_alloc_node+0x1a0/0x260 [ 1221.074593][ C0] __kmalloc_node+0xa0/0x240 [ 1221.079202][ C0] kvmalloc_node+0x6c/0x180 [ 1221.083728][ C0] nf_hook_entries_grow+0x309/0x730 [ 1221.088949][ C0] __nf_register_net_hook+0x2c9/0x910 [ 1221.094347][ C0] nf_register_net_hook+0xae/0x190 [ 1221.099480][ C0] nf_register_net_hooks+0x40/0x1a0 [ 1221.104696][ C0] nf_ct_netns_do_get+0x20f/0x5b0 [ 1221.109750][ C0] nf_ct_netns_inet_get+0x3b/0x150 [ 1221.114910][ C0] nf_conncount_init+0x123/0x380 [ 1221.119886][ C0] page last free stack trace: [ 1221.125441][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 1221.131322][ C0] free_unref_page_list+0xbb/0x8e0 [ 1221.136473][ C0] release_pages+0x1fa6/0x2220 [ 1221.141308][ C0] tlb_flush_mmu+0x105/0x220 [ 1221.145930][ C0] tlb_finish_mmu+0xbd/0x1c0 [ 1221.150553][ C0] exit_mmap+0x384/0x960 [ 1221.154834][ C0] __mmput+0x118/0x3c0 [ 1221.158916][ C0] exit_mm+0x1fe/0x2d0 [ 1221.163005][ C0] do_exit+0x905/0x2480 [ 1221.167187][ C0] do_group_exit+0x217/0x2d0 [ 1221.171807][ C0] get_signal+0x1272/0x1350 [ 1221.176336][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 1221.181998][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1221.187309][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1221.192879][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1221.198440][ C0] do_syscall_64+0x58/0xa0 [ 1221.202880][ C0] [ 1221.205213][ C0] Memory state around the buggy address: [ 1221.210885][ C0] ffff888023c32f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1221.219027][ C0] ffff888023c33000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1221.227141][ C0] >ffff888023c33080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1221.235218][ C0] ^ [ 1221.240603][ C0] ffff888023c33100: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1221.248685][ C0] ffff888023c33180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1221.256770][ C0] ================================================================== [ 1221.264859][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1221.272062][ C0] CPU: 0 PID: 26038 Comm: syz.0.6339 Not tainted syzkaller #0 [ 1221.279534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.289606][ C0] Call Trace: [ 1221.292905][ C0] [ 1221.295769][ C0] dump_stack_lvl+0x188/0x24e [ 1221.300477][ C0] ? memcpy+0x3c/0x60 [ 1221.304470][ C0] ? show_regs_print_info+0x12/0x12 [ 1221.309694][ C0] ? load_image+0x400/0x400 [ 1221.314213][ C0] panic+0x2e5/0x730 [ 1221.318120][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1221.323166][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1221.327701][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1221.333613][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1221.338482][ C0] check_panic_on_warn+0x80/0xa0 [ 1221.343450][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 1221.348598][ C0] end_report+0x66/0x110 [ 1221.352863][ C0] kasan_report+0x118/0x140 [ 1221.357393][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 1221.362521][ C0] kasan_check_range+0x235/0x290 [ 1221.367471][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 1221.372611][ C0] memcpy+0x3c/0x60 [ 1221.376442][ C0] __bpf_get_stackid+0x6c9/0x920 [ 1221.381396][ C0] bpf_get_stackid_pe+0x33f/0x400 [ 1221.386434][ C0] bpf_prog_709c33675fcd9051+0x21/0x36 [ 1221.391902][ C0] bpf_overflow_handler+0x522/0x7c0 [ 1221.397113][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 1221.402408][ C0] ? perf_event_switch_output+0x760/0x760 [ 1221.408140][ C0] ? sched_clock_cpu+0x6e/0x260 [ 1221.413009][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1221.419284][ C0] __perf_event_overflow+0x448/0x610 [ 1221.424601][ C0] perf_swevent_hrtimer+0x3ef/0x590 [ 1221.429840][ C0] ? cpu_clock_event_read+0x50/0x50 [ 1221.435067][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1221.440978][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1221.445841][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 1221.452048][ C0] ? cpu_clock_event_read+0x50/0x50 [ 1221.457336][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1221.462476][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 1221.467459][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1221.473482][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1221.479157][ C0] [ 1221.482110][ C0] [ 1221.485059][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1221.491082][ C0] RIP: 0010:perf_pending_task+0x7d/0x470 [ 1221.496748][ C0] Code: 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ba 6d 2b 00 4d 8b 3e 65 8b 05 48 7f 5a 7e 41 89 c6 4c 89 f6 48 81 e6 00 00 f0 00 <40> 0f 95 c5 31 ff e8 78 86 da ff 4c 89 f6 48 81 e6 00 00 ff 00 41 [ 1221.516387][ C0] RSP: 0018:ffffc90003577dc0 EFLAGS: 00000246 [ 1221.522482][ C0] RAX: 0000000080000001 RBX: ffff88805ed46a58 RCX: 0000000000080000 [ 1221.530476][ C0] RDX: ffffc90019ea9000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1221.538483][ C0] RBP: 0000000000000000 R08: ffff8880330ee343 R09: 1ffff1100661dc68 [ 1221.546494][ C0] R10: dffffc0000000000 R11: ffffed100661dc69 R12: dffffc0000000000 [ 1221.554503][ C0] R13: dffffc0000000000 R14: 0000000080000001 R15: ffff8880b8e00000 [ 1221.562525][ C0] task_work_run+0x1d0/0x260 [ 1221.567153][ C0] ? task_work_cancel+0x220/0x220 [ 1221.572216][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1221.577702][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 1221.583012][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1221.588587][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1221.594064][ C0] do_syscall_64+0x58/0xa0 [ 1221.598502][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1221.603212][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1221.607912][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1221.613832][ C0] RIP: 0033:0x7f413d59c799 [ 1221.618262][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.637887][ C0] RSP: 002b:00007f413e5320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1221.646319][ C0] RAX: 0000000000000001 RBX: 00007f413d815fa8 RCX: 00007f413d59c799 [ 1221.654311][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f413d815fac [ 1221.662295][ C0] RBP: 00007f413d815fa0 R08: 000d414ba3a4c9b2 R09: 0000000000000000 [ 1221.670278][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.678261][ C0] R13: 00007f413d816038 R14: 00007ffc08f93fa0 R15: 00007ffc08f94088 [ 1221.686250][ C0] [ 1221.689864][ C0] Kernel Offset: disabled [ 1221.694195][ C0] Rebooting in 86400 seconds..