last executing test programs: 6.596286114s ago: executing program 4 (id=3811): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x5a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r3, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x27, &(0x7f0000000500)=@raw=[@generic={0xb, 0xb, 0x4, 0x5, 0x1}, @jmp={0x5, 0x1, 0x0, 0x7, 0xa, 0x2, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x0, 0x1, 0x6, 0x5, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x3, 0x7, 0x8, 0xfffffffffffffffe, 0x10}], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 6.424333656s ago: executing program 0 (id=3814): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7008, 0x0, @perf_bp={0x0}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003900)={r1, 0xe0, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000003680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000036c0)=[0x0], 0x0, 0xd9, &(0x7f0000003700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000003740), &(0x7f0000003780), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000037c0)}}, 0x10) sendmsg$inet(r4, &(0x7f0000003980)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="6b90d47199ea429dc6a2e51fdb1dbb20ba90fc5f74a145eae7468be3d7c9f9aaa3a2c7f0f7684f6066794c83", 0x2c}, {&(0x7f0000003440)="729a8246f631bac4972f9e92fbb259a995af08583f7693a8fe74ab9e711bb58696f3b29d3dd70c55cea66cd3f8fd97cf0195e942bfdfd2b2fccd9cea68de9deb90b547427f432ab7c9d6222792020cef76930c5ba724d1f423e21b2067eae425a69403ac3abbfc1d87c317c0ac90e0b1983c2d5f7d7690a61c608ac5bb82a262bc9c27b8f5f20b8c910d32c72cd077570e43b5e48ffad93cb18cfe9521792f36115c0a1ebb109d13263e423fd2f1290a124935ba749b17573a220a32b4e14988a07ad56a570e07ecd7355e7a325cb20f76b08c8f721c73", 0xd7}, {&(0x7f0000003540)="4203b1466798e7ce3ab6ac15ab418effd85d36735b3c6cc5823cebb42c8f746248d7dd7feda0be20b3659ee1c581a3ce3ba87453f64782dd8062cfa969fa7f1a168a5bf499e440c5", 0x48}], 0x5, &(0x7f0000003940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @private=0xa010102}}}], 0x20}, 0x4) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, 0x0, 0x9a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.401129816s ago: executing program 4 (id=3815): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x23, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x69, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1e, 0x3, &(0x7f0000000a00)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x20, &(0x7f0000000a80)=""/32, 0x41000, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0x7f, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000b80)=[{0x3, 0x3, 0x9, 0x7}, {0x5, 0x5, 0x2, 0x8}, {0x1, 0x3, 0x7, 0x8}, {0x4, 0x5, 0x8, 0x3}, {0x2, 0x3, 0xa, 0x1}, {0x4, 0x4, 0x10, 0x5}], 0x10, 0x2}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1e, 0x3, &(0x7f0000000a00)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x20, &(0x7f0000000a80)=""/32, 0x41000, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0x7f, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000b80)=[{0x3, 0x3, 0x9, 0x7}, {0x5, 0x5, 0x2, 0x8}, {0x1, 0x3, 0x7, 0x8}, {0x4, 0x5, 0x8, 0x3}, {0x2, 0x3, 0xa, 0x1}, {0x4, 0x4, 0x10, 0x5}], 0x10, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002", 0x2b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) gettid() (async) r7 = gettid() perf_event_open(&(0x7f0000000e00)={0x0, 0x80, 0x8, 0x2, 0x2, 0x3, 0x0, 0x4, 0xaca3ad00ded0036d, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x8, 0x10000}, 0x4000, 0xf, 0x8, 0x8, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x80}, r7, 0xa, r6, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x26, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x9, 0x2, 0xa, 0xc}, @alu={0x4, 0x1, 0x5, 0x1, 0x2, 0x10, 0xfffffffffffffffc}, @generic={0x4, 0x7, 0x2, 0x7, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ldst={0x2, 0x3, 0x4, 0x0, 0x0, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7fff, 0x35, &(0x7f0000000600)=""/53, 0x40f00, 0x2, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x8, 0x5, 0x6}, 0x10, 0x4c55, r6, 0x7, 0x0, &(0x7f0000000cc0)=[{0x3, 0x4, 0xf, 0x8}, {0x5, 0x4, 0x8, 0x1}, {0x3, 0x5, 0xa, 0x2}, {0x2, 0x3, 0xa, 0x4}, {0x5, 0x1, 0x7, 0x7}, {0x2, 0x3, 0xe, 0xc}, {0x5, 0x3, 0x8, 0xa}], 0x10, 0xc0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0001e00ac000a0502000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050040000002cf8073113d000000000085100000020000008500000076000000950000000000000095002b05000000000ae7e2a7884179a36f5d4a7a4204e55f999e823a2b4dee5d2efbb8f2fac059db43bb87cc817874f1afa6d2ae2421aab8dbccb4951dc7407fa6a264e6575eb068bf3b88843081100d26dc51f87154ac48e438886d6935e1a28354aba51eafb4e216a6bd3e0588b9ad18a881c98cc8918b3078a49eb5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050040000002cf8073113d000000000085100000020000008500000076000000950000000000000095002b05000000000ae7e2a7884179a36f5d4a7a4204e55f999e823a2b4dee5d2efbb8f2fac059db43bb87cc817874f1afa6d2ae2421aab8dbccb4951dc7407fa6a264e6575eb068bf3b88843081100d26dc51f87154ac48e438886d6935e1a28354aba51eafb4e216a6bd3e0588b9ad18a881c98cc8918b3078a49eb5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 6.380022357s ago: executing program 3 (id=3816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={r0}, 0x4) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001000)=@l2tp6={0xa, 0x0, 0xf10, @remote, 0xff000000, 0x3}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)="ea1a1f60e860784cd09c467917a47f19f8e6f19010664454e8cf456e60ec32924971efc61dfc60f1f4b7b0673e7d85f777b0fd8a0f2bf90cb4b1f94dff522c7446778eee3929c622fe23ea382441ddbd46f96b2bcffc172507e418054d2e0381e7462ba8426226b8e46070fc4294638deedf35a12311fd027855a1f1e91a18d8bebffa83a33087cc86b6c7be74ca3d79fde83300843f64cf1860f513c727c490c9ac692a11cc7a60fe8a", 0xaa}], 0x1, &(0x7f0000001180)=[{0x70, 0x102, 0x7fffffff, "6462d44d9e85bd9664694c35b9542042441580b59988e1b1b54ffb15c4d78bd86c2527e5ca7659cc7437eb787c67fdd092eb4e5ab034b60701609bbe950d15ef544d06bf86df2528b89cde01688358d1f8941600bb71ad330834c0"}, {0xa0, 0x29, 0x4, "5bee6ac6df8135a67e004e6f8af48edfc9c57ec25c60582bc5162e6253fd20aca8b555ed325a9d879d3e755efa6ef91f2b6d80216aea7b970957705b5a4de6710e5c122ba4abc913178c76bde8706b301b18687118f0f0751b81591220fedbdbf7c1698bbd9a9a3d30993c3a74bd6c7b52b9e0c5db0c0046643a23c17d19fc52d0e659f8d6d3468960aa5264e8de"}], 0x110}, 0x8004) 6.137775679s ago: executing program 3 (id=3819): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=""/147, 0x93, 0x0, &(0x7f0000000200)=""/193, 0xc1}}, 0x10) r2 = socket$kcm(0x29, 0x6, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0xff16) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x200000000000020a, &(0x7f0000000080)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x2, 0xff, 0x2, 0x20, r5, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r10 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10241000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r11 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@func={0x2, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd}, {0x3, 0x3}, {0x10, 0x1}, {0xf, 0x2}, {0xd}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x1}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x6, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x3}, {0x8, 0x2}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x2}]}, {0x0, [0x0, 0x5f, 0x61, 0x0, 0x5f]}}, &(0x7f0000000dc0)=""/211, 0xe7, 0xd3, 0x1, 0x80000000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4f6, '\x00', 0x0, r13, 0x3, 0x4, 0x1}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r15, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) sendmsg$unix(r12, &(0x7f0000000840)={&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)="8d9cdc53772a9a5b899cbd1caa8df013019550d81776f80cbfced5094b47d69a9940281ea88356039d1d65e761705601fe2c6f51ea1b08dd9b5ffc995e76766f235c3c82e21c12db9f2a02688dd933d5b7a34c4590051027743952ded0e1f689e5472976737ba0b2d0b4b7201c9c94dfd21eee18a3ec9bce97ffeef783b2617d87375a18ec1330e89e812ff515df17b54ef0b6b80c72a07a8b592e0f89cfc5cdaf3c5a8039df9703a0a911dae9b8ee29edaade0f83da6febb4b35f61b27b5c7f2488e5b5dd00065639b9a3744075", 0xce}, {&(0x7f0000000640)="8ece8c798c45132064f1478ff55a2f01f33b57deff1ebf5b1e89616903de959195f32d82d5c6d05c0cdd326901be3ec609c97238fc0aaf29fc7cbcec9eef4d9db4580266a68bbc84ccb4854e2661fbeffd6be118e2f310c63efde2cf1f2eb9559844e78616f20ac3b3cf3bccd1d5eff06e8347267c8cf50a55ff1f70c68d38039901110c8ec2e44b34b20ebf933372a972d465f812490eff23317184533c44483169fd0d9a092e0fec39b63b4b5c86a066922f7c48deca9de050a32b26e58341a14499a3973222f02c173ae8c32470d1e9320f111e25e601596d208451a0590b6121a1447c14864dc78f456cd3fcd3f1709f483d346e2f96", 0xf8}], 0x2, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [r4, r0, r14, r10, r4, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2, r15, r3, r2, r3, r2]}}], 0x68, 0x4000000}, 0xc005) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 6.06207348s ago: executing program 4 (id=3820): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xb}, {0x2, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 5.466778197s ago: executing program 4 (id=3822): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 5.446581327s ago: executing program 2 (id=3823): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r1 = socket$kcm(0xa, 0x3, 0x3a) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937a6", 0x13}], 0x2, 0x0, 0x0, 0x900}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2400c814) (async) recvmsg(r3, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x0, 0x26, 0x83, &(0x7f0000000300)="f6f11c07c99244ecda7c1192a1af2df98b92012bfdad9cc43a33e7eedf2fed921d2f2fa8f0c5", &(0x7f0000000500)=""/131, 0x7, 0x0, 0xcf, 0x8c, &(0x7f00000007c0)="2f22e4a3deea310c4f032c91da4c38b2b950b63c63449b931abe0e1db68d19ca4a6b8a47bb4965831e965773a44484875ad5ae916fe72dfd2f0bbfaeb666185ee5fae9f298ce5168f405d4dba4b682a15428f8f27ddb557caddb473a81b8fb6cbd9b1bd57be6f8826a217387321e9261842f9aa10eb04057d77c812438aeb46fedd7fb08bac08ac70d335f483ea3b81abb138a5d543043ae77a2aa445ac155dbd6684ffdc82f9d3ed0ef42e985ff09c4195eb6064914ca9dbda2b511adbd5a47fa6b00ad0210822fdd3a9a1a963a99", &(0x7f0000000980)="4512c7cfc7abe030438a08071221ecd6463e0983df111bd2d6f678b0de06a15a469264950b9d82735ccedf528b26c7d45934e20efb9c2d574ca8fec82be6463684010604c36876ea879de5d023b6ac785b04ef51813b29982f03fa84585d9a13343625fdfedcfbd5fb6584bff0c19564f6b5d75b911d6eab42cead711b23b4711e6410cfdaa1ca5723cd512b", 0x1, 0x0, 0xb}, 0x50) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=0x0], 0x50) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700"], 0xfe33) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) (async) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x40010) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000240), &(0x7f0000000600)=r4}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) (async) r7 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async, rerun: 64) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000040000000200000000000000233d8adc145b71327aa726864fccbdf2bf60b067735c89b5e851876f25de2982b31c85825091159f270c6a5bfbf85cba4f19ab5d488111c9b60dd65e51800f4049196ac7f0af22437fb2509e18462cc499c323716d40507644e7469579399ff488e9f751612c2bf3f178069de1f51584233c00ef4ee3dd83cb558fc67da28f7056375711a575f2dc3ee4778303681e3778e792ee687f6d516b", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES64=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 5.340379808s ago: executing program 0 (id=3824): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r1 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x8, 0x29, 0x0, 0x9, 0x0, 0xa, 0x40, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffa}, 0x400, 0x7, 0x6, 0x9, 0x3, 0x10, 0x3, 0x0, 0xe, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb59171e3664ffcfc, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x7, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5.327164078s ago: executing program 1 (id=3825): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x12986, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) (async) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socketpair(0x8, 0x1, 0x1, 0x0) (async) socketpair(0x8, 0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x80000000}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) (async) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) 5.20785048s ago: executing program 4 (id=3826): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$cgroup_int(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xa) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x20}, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x113, 0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000380), 0xe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff5) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 5.124382911s ago: executing program 2 (id=3827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfec7, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x850, @private1, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r1], 0x18}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x8) r6 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) 5.056717132s ago: executing program 1 (id=3828): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x403, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x949, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="6120db072273174a0200089c6d70133bc43c3af917ebb48e82e404c33128a5e30c6c0b1fea83b07d853fbf877151db5db75f256727f8fd6181e6d0b10e0600000086be2a68fa0dc2f5d66afa13f0667e9ede65ad4d3c3611f2c557a91e54bc4f"], 0x9) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x2, @mcast1}, 0x80, 0x0}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) close(r4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x14, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x200000000}, 0x0, 0x0, 0x6, 0x9, 0x0, 0xd, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) 4.814959414s ago: executing program 2 (id=3829): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="67d54a42000000bb8ab34d0000000000", @ANYRES32=0x0, @ANYBLOB="ac141410e000000100000000180000000000000000000000070000000101000002000000"], 0x38}, 0x0) 4.725408335s ago: executing program 0 (id=3830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) r1 = socket$kcm(0x2, 0x922000000001, 0x106) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0xc, &(0x7f00000000c0)=@raw=[@ldst={0x3, 0x2, 0x0, 0x0, 0xb, 0xfffffffffffffff8, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0x9e, 0x2}, 0x10, 0x243d4, r0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x58e}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000)=r2, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.724081465s ago: executing program 1 (id=3831): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5460, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61006100"], 0x0, 0x58}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x5460, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61006100"], 0x0, 0x58}, 0x28) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) 4.723065775s ago: executing program 3 (id=3832): r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x5, 0x41, 0x9, 0x0, 0x0, 0x48, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x5400, 0x1, 0x45a, 0x9, 0x9f86, 0x9, 0x5, 0x0, 0x8bcf, 0x0, 0x44d}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0x4001, @rand_addr=0x64010101}, 0x10, 0x0}, 0x20000899) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='#$&@-\\,:o(\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000000)="b9fa030711a5f32e019e14f088a847e0ffff00124021632177fbac141416e000030a94029f0303", 0x0, 0xffffeffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.544073987s ago: executing program 0 (id=3833): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8980004000078", 0x14}], 0x1}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)="72ee06449440e4d28363a4337af45cfbfb4e518719048bf974fe7a5f3f19df", 0x1f}, {&(0x7f00000001c0)="53eff6e1b2643a15ed26b36ab161fdecef33e4bdbcd7cef8abe689ee65cd9c1cfbcb0b2dc835de58df0d278ce01538bdd9d26fd0106bc117be3eaf511ac927eb2ae7a3451becd574a72533bcbf7f7e22c4d0212b9a2138", 0x57}, {&(0x7f0000000500)="5cfc54ae9ac4a21107e15aff8cddb1d94d3930c1c5566a41b53a610f5d994d799325fcdeff0e181a8a9c48210b751f1b8da704e457390c9a125935acb62815f647a06aad0a12a41a251dda0d45f54bce11ba3ac781862a5daa61ed00489ded270ef433ea638ace1b2583ff09cb2c8815ee277195b0d52fec08f6d8744860ad8d9037b1629ec43b22eda8d597701a75b6fbafe6af834e0e0d94403456e4738000def476e9d1f2b51386138ddb5067cf9ab1df25b85ce59ebacf90dbabd6491616a820b8de8b97a4ffcd042855fb9644f33465bb3b03297e17408c6e3dfba14f98ec5de09cd0519ad3b8bfa4484c5b64e853e42fabe8e610e32da9773afa70deb41b87cc6820189bbbede5f95587fd0b2f57870fe5beb6f83593f07c1650215bdb1f7861e624461fd0e5b7e7b343452e7540f955cb73532ce670f6a8a44ba61886b54c322ac585d22c303f8c948df5ea79a4ce1778df0fc80ff5e2d262f3cccab6ea839989d8e35086064d3359d821706cc05af24ae351098b0a849440dd30d26d0536496f9e4253a9ebc0b26e68dadb219e005d5979ade3b74d1f471070a22a143ded1f710dbc7210a713a3ba5be69f14a428a0892a09cf16d3d5425748121b53bfca4c24e4e5386d542c750fd406fc4cf7cc1ae29aa05562fbbdb6a49c54dac5c22c842d290a6e1258255ff1a1a0d5c98c4858dbeb21d9b3d744b91947c7bba30233aaa1023bd507c4df0eb150e796911fcce9ca54104c8079aabcc74d32e3951dbd55ac02b98104635b265b6f2f2e8367008d99a4fe188ea0f523a8cb0283dec65ac37cb79d3ad02b8ce37d19f2cb4b4275cbb04d8a56f457cb60c4a784504675f97db23c8220cff050e25e40a5a517f01a455edf422505c1685d90f2259a0392bc39f159fb6c942753a59fb6fd4c5f140a1aa0a9aadc6502216c69967dd023c108ae676b1ec808d4272c8c05bc703bcf78b4a0f737191c729514eb57480dad08d7120314f924f599d2de0e84d127097b3160fcf914d141642da0be7081938d83a82fb8a6d5c2430ad15426be110ad675a8dc087c381703538d7b436521a0b3be02312acea03460c6651f098016626c8328eb0786a0f5a5979f8ae4fb66fd3fb2d7ab7561f9101a84a2ffb85d912618fad9f859d681d1c290d19922fdbec81be1479c5deb3ed1d04e443e70042fead7c2f605ac62c7816779a2c7ddeef7a7e6d30fdeecc9e84644d95020e8c2b3b3a7ce85df3b6935b8b4c06d6632809b80c590510169a4fe120abda81ca0d6219bdafde787ac4585e2dc8ad0f7f046cf8302ac4634e0267bd70da48eb5f95e81f674f2d9808d76342dbeeba78a2059d0725bbe69018d8448be206aa5efec0dc8b5ce07fa22f6551d842f792d13bc3f563e2d40c4a0fe3e4cbebd01179b08984ba3318de102a8668a8d106352e1c4c8e82648c3941ae9c5ef48bf16f647d72a043545db5e8b5c349db6073509bd681c9b6a2136d04cd0ecbf0e4ad10daf5eebf8b3f50bccb94615b75c0bd73a469b0c3757e9447f062263449429e8f0c33bc2d28854633923887ec4f2a814085d8537bfd3ec0a6d9708e738ce4646885417c48489c6b3bdd933fd1568c0ee96176d1ba548d1642431e2f5ea391b10e6c9d562af1ee7c51deaa567bd8db300e151e7a259ff6235c0633f4a7f560d696d4e10e2111bc67778f7816b7c6f2ed805535d7dafc76c6e6f8bbd1097041e0ecd05cac5fee8637603c8e1cfa94e8089c835e212a7cb478a40ec7bf2c1b1ac821ecdc9ba8bb653375a6549a91bb2c1de6d803285686f653a3c486ec72e92623790dfe7813924f5c078351221df0cba542ae29e2038b13e1dee629f5558924fda1417413a43a4e55297cd45e5be00727872cb1fe07e86379d3a85601cd8fa66dc2c6104ac160dcd922088835a7a47e7b66334295c638647569564f129b325b80d3412de9c992b5714f5751ea9ddde66e6d16c507ec2c33b9e5e323b2d0d30ed62ee4e75ff41bd42aa5d7d0863c6adcaedaa09c6942aca002f627bd6e4388ddcf73e5155178d30c2583a6cc606cbe7d0b0304a3c078af8eed55665c06ab1c0497ff8ed1510315696f14daaf4f2c84bc48c74ff856646c478b4776d6de0e2b40b29a5680b03ad82c92e12ed3101d49e3b7c790e13983d8d629a6b3b8bc5802856509467dfb37cdd613ebacabfa2f5ec7e09c2b038b7f394e35ec205b95adf0076604417f066d506b9393fe5b8bdda870b7dedd156987970e4aaf3950b92a37b0289137a646b83b013189fe3ebeaa9e85db8bef129edd35fd162ac094d72a3395edefd3a5e2d92a861a6e2f2988fdfbb5ac2ca9c2e7a06bb622760c561deb728b0739530584932b7cf0857a448f289180727a9895aad572a02c2b17fe04cf7ef96bab0e5cb991d7e2e3a52eafa9ad6e0a2e455c48915eb793a2ff04254ffd5122e5805480fc09150ababaf8962d6d371afdf976608bb5802bbba232fa0df2be35bab554a6135852e89959f1dd42a6e95b4ed7a8d0b65020fb789925137b157e208a9ca8af125b40405db91eda60835af015ba3f1e48e7be84cd0c977da56a713fa4b0f8d76379f570ae726a3d462a860893f95262997321c91fa25bad77a6e8609294bb78be24ecca73f103d3e274464596f0a4600cddae8ea50610eab1a7d0c20ee97a6726312c81f4997bf2a2d7e5e8e89c19c5b97dfd0c550088247f1222f956ed90cd6721fec0df9f4a6ab20df29a0223fb511d6cf6955098eb8c020edf0f53488ae3671ba24bc224a34da5b94dfa6f9eed9422f1f64d5c39e4413adbf8eeed7f733602340438e30a40eeb32dd3cf800c556c7d184ccef09deeab76f06c0d49d2e0d6549799bad19382b92668df5d006b41bdf8cff855dec1175010cb84a8df33fd0a59996c568f2f659580399289339f306917b1da2d95c40525758c97f2ff948b80216e511d9997bbe6aa3a16b9f6f4b95f4bcfb180b82549384b716b4892fa8a129d71afb4ba4e757bcac19aa0383385f50c970b166137b9b02bf509bb4eed6e9f97cab3c27a51a20b0a006fb16e29ed05e66f8f627e24e51190a2ef5bed2a0b103309e990a0435c13f22782dad834030a450e20496008f00384f9be1b3b49da3219487e382f5ed7aa26a094ba9b425b29c09d08b87692c98a67d95f2bda4344d07d4d7810ab8b537d4f3681a50b87425ad66dea36aeff606eda35a8eaf8e301da0f98953d546ae27dc40880ee87d2788babd737b5d5e9918788a5623b081eb80b5fc0a2ebfb0d60b10d7ed5b2fe2b8c8e59112d1f458344a592e15c780988102c723ccc84e89e5a2282aca795fc66051745a19a1ccfdc91b9d9587fd17f4baadca79ea85aeab9f29bef24ccba104bdb3062ce6d285def61f09148e2153ce0d298404cd768cf70122a4386e51f758dfbb777464f70cf11cf57657b40147256f1407febd02de4e8622b3c26ab73454f9c949364d309330bf0d3baea98257f83acb13f31c8a43a73dce287db3f551bdfa9d70fc7d7134e303989420762939405a9815aed2f0d41e2857c625dc237c7f4190e4e7a59cd1123afd29f623fe892ac54b97cc53ec9c5f95a126ccccfbb0ee4441f46f63de5c64ff6e47ca307e42712b5efa75e1309da89373740d69fc1d9e5b2eafd460e0f25ef5eab8d066db32261518ec26d4a1019967207c376a0ec745ef49d44bf0bbd22d739c122feb9e168dd3c69aedf6c6ba04295c812b8b5803cc109939caff4871bf21a135763cd9bfe1d5634c9df14fc47b384f23a23c215a47d59fa5a1a7a7d2cc49597a6db89d4b4011e1d15d863e9088af879817c3537092ba63d10316c98533e10ad9ca77f4e7dcf523a1643299d47b877cb95459ac058f588b9583a5829ebf43408d781868e427a6f41a1b38a5164e03b4389b1b8c0cd711b8ff0ea5f9d2236f4161f41a9af61c3144c08280b0a106d47920a124d181c95b6a9b7ad0eaed2c60cef0c2ae80b04d9265d67b53e6d349dea1d85015d9326823c868ca006899ca403af109ff27a052eb630387556b98a796c9de21eab794a64bc37fcbc93f90f79f54c3d7c51a9cf8638f435d9ec502805450dd9a3dd31c3e168d830e685325531da2e6d74e3bd9ef4dc59644f8bff948ca317823d16bbc77a9baf45f6ee6a7f9c6917e386abdbadc4a9cc2716af630b76f728444e61764ab91853ceafe533c59a34d1c2015db482b4085ddbc88c475255ca0fc269618f8a490fc4f8836b777cb9a90904876ad7b13b9dc8f62f9317a9fe1e779fcc90fc1c3e31e687e12459633447a0bec9c62b17cec18b6bc11834758462304ccac4eeeefe67a7b0eb314e061140f28c9247bcabc946e5db70414912afa884ba4b8ff3daaeb036254ec87c9d6e273c14e7a4e1a8d0139763bbbd587c121065fcd2c7ba6e1e2d04aa824277ed2a5bfbf012074e259f1e390d3b7669f2699c62190d27508e03a57ffa73cfb2901ef9c1a0e188044489d1002653e06fcb8c691af50d46cda341dfd9af724ea1eee338302dffe0391d29096e1c9016f7f0f1942c8e8463102a9251fe8b22c3d23a45481a16fe3fda437712c7232b1b85866b62578a87818a759c5794fdd04fa8496c69216390055facd08dd9a41d7fa32af1abd33cd6ad0f450b25e7e3709cbfec4f85b553199144fd2a5b47befbda3cd46badd92cf400df56ce0bd1bcc8696b729621fee7bc0932ae41287deada8878f67ddce648176290b22472af1023aa3d3d46b8700640d9c27e49e051e9af903d6cd8a1b0edddb86252b4500471c348df9f70382fb79672398d826a352cb59c62e524cc661e4d2a13d3dc48c5d61bda492fff48988cf1082c39a4610d2538d0f4508a3c7ed2fe84be8671006db03ced8d03cf3b89baf7775bec5982084f062bc92b4b811a5ed9693aadd951061ab0992671f63dd1a8d02e32a6638697d87782fbe78f4321bde42003cbac5f43ada86d60c76089cfdc7e45108f41f5cbd479cfe434ec73eb5e8a4bccda388fc3c08277ef4f84198f69d8a24ad3fed75cfe92d3a836d377ca03b48fec0e158e29f7943f9fd7093d7fda7aa893936f1bd79a491fbbb13c95f468494b938bae1620f15641f532af86e16da2ef13dc5fed78ceb34b543b5bbe483ca74ce600a02078431df8f361b489608ab408d021144fcbc58a07ce63f1a074fa7c756127e52a1b105df39274262748f855f9d5ed2ab214462754ecf8d88402e41ce4e2daf9da864bfda57e6277b6516687e02d8e9a1874196d95599f1435285c72b1e56a095e2c9a817e08e38747813c56178ec9cc026e31811a8b800e5856ded030bc364bd3810b982a230ad150f40345f8649dacac85979e1828fd308b7edd133be8625f2ba53e232baed76d2ca1db3ec368e5e3a6ac53e78a78e0d3b09813dcf8dced25ed628fc2651ded8eed8ec8439ec36310dcb1550329c60b3950b8075c052e2feaf419b7e9e159182a5e09846da8e8740987ba3e60f97cf6ee72b3b80ab2342f0237d0e96b6327a3c1110161ddec4a106bf7ef742d5acd5f1f8da6548b836f9e2cf5fc943ef57a6495f08830f3af23b2505314f598d6ea10510c6f506af6bbfa5fc9c247f0549233b1588a53bddf532ccb4bc425dc2b12571428942f1eea32e1ee9e9a47524d24d9c743ecbedeac3f67d44e8ad226e4532dafed55ce6679eb5b0291e87a1bda4a8ad8a6e547e70c7a609748f8b9dc8c7aad374023f288047ee59e0a5cc2851b1bf828ba3666446f1841e4576aab69ec46fa68877b7b4469614246e9b15cfd0dfc6", 0x1000}, {&(0x7f0000001500)="978421f9f3073cdb5da12ce5c9d30a0ab72e8576a7fb2648a69c273e12685092d364c7c847025a6d89377ce16459c05ac83d03a732103dd584cb6504901106dec9c6a558633065f3663cd03aa0b1b8b24c5e1b9ea5fa", 0x56}, {&(0x7f0000001580)="3a3cd31d69c8f68110d2f16ceba048045b3eaa6a70a9a58d18c973ad1d871546b379e098997427a124f7ec30bd7d8988593448fede209952190a3e0034d339ee22edf8cd6d074a34837ef1b5731ba64144f20a1167a4c3e59344fd42491ff6ee8d5b9688954e8d5abc83c57061d26d80fcef8c3230edb8af23cc9d7644b2d94e66f4afef26388a6abd2b593190e1213ca67deba203d4106b91839d921a010e1fc2962cfde31e9c3d182d3333d54a52b4267788e0ac7758439a8fe45db03f4c94df435c92dfe24b3e17b5ce5072c480c2871fb6121a1f3d6406234ded39bcae4fbbf26a583623de0eb47492056c7a0313fc73f311cc1a881c", 0xf8}], 0x5}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x59a7) 1.500448712s ago: executing program 0 (id=3834): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}, {&(0x7f0000000080)="c5ba1c5e059f44fa385767136733809471fb43d42569c15789ba810cdfbc415fefa9a1c5c3b4650915ea652c2fb61774a1148a2258d34e486696ba67b17fb0de7f748372f58befec9830f4ca0300ef7d8a7aaec585215b7fad80edcb65d52ad4679879fa23b70c5efccd748526159401f00a4e33fe57cb2482552fe3b45bec52f87bb59751bb68f6367d53f263820d15d044ab9967cc541c2bce842512483f29e896", 0xa2}], 0x2}, 0x20008800) 1.500143473s ago: executing program 1 (id=3835): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 1.494581443s ago: executing program 2 (id=3836): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 1.477050313s ago: executing program 4 (id=3837): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2000, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2b, 'cpuacct'}, {0x0, 'freezer'}]}, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c0000000000000000000000ffffac1414cf14"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)="02f5060102000000e4a17c4505", 0xd}, {&(0x7f0000000540)="96cc", 0x2}], 0x2}, 0x54) write$cgroup_devices(r0, &(0x7f0000000200)={'b', ' *:* ', 'w\x00'}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x480c4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xffffff9c}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x559f627e}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000dc0)='GPL\x00', 0x1000, 0xe1, &(0x7f0000000e00)=""/225, 0x40e00, 0x72, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x1, 0x9, 0x2}, 0x10, 0x1c6e3, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001040)=[{0x3, 0x1, 0x10, 0x1}, {0x3, 0x5, 0x10, 0xb}], 0x10, 0x5}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x4) (async) r6 = socket$kcm(0x2, 0x3, 0x84) (async) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000000)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r9, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01690000000000000000208000002800000002000000000000000000000300705b00030000000200000000000000000000000000000105000000200000000000"], 0x0, 0x42}, 0x28) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0e0000000000000000000000000000a536000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0x20, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1fe}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @alu={0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x70, 0x5, 0xb, 0x0, 0x4}, @generic={0x5, 0x6, 0xe, 0xff, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000004c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xd, 0x4, 0x81}, 0x10, r9, r8, 0x6, &(0x7f0000000900)=[r11, r12], &(0x7f0000000940)=[{0x5, 0x4, 0xe, 0x2}, {0x3, 0x4, 0xe, 0x1}, {0x3, 0x3, 0x2, 0x9}, {0x4, 0x3, 0xa, 0x3}, {0x1, 0x2, 0x6, 0x6}, {0x1, 0x5, 0x1, 0x5}], 0x10, 0x10}, 0x94) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r13, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000cc0)="2701000001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4131accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b4e9b06ce", 0x48}], 0x1}, 0x811) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r14) (async) ioctl$SIOCSIFHWADDR(r14, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4c, '\x00', r5, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.299099405s ago: executing program 0 (id=3839): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x4030582a, &(0x7f0000000040)) openat$cgroup_procs(r9, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x8, 0x4, 0xee, 0x0, 0x9c3b, 0x44900, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_config_ext={0x401, 0x3}, 0x821, 0x800, 0x8, 0x7, 0x4, 0x2, 0x7, 0x0, 0xffffffe8, 0x0, 0x4}, r10, 0x1, r8, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r8, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x2, 0xc, 0xc98, 0x6, 0x100, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x8, 0x40, 0x9, 0x14811, 0xffffffffffffffff, 0xbe, '\x00', 0x0, r0, 0x0, 0x2, 0x2, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0x8, 0x1, 0x6, 0x10, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000400)='GPL\x00', 0x658, 0xc7, &(0x7f0000000540)=""/199, 0x40f00, 0x20, '\x00', r4, @xdp, r5, 0x8, &(0x7f0000000740)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xe, 0x7, 0x337}, 0x10, 0x0, r1, 0x8, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, r6, r7, r11, r12], &(0x7f0000000a40)=[{0x2, 0x4, 0x8, 0x8}, {0x3, 0x3, 0xf}, {0x0, 0x5, 0xe, 0xc}, {0x2, 0x3, 0x1, 0x1}, {0x4, 0x2, 0x9, 0xb}, {0x3, 0x1, 0xc}, {0x3, 0x2, 0xe, 0x8}, {0x3, 0x3, 0xf, 0x4}], 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}, {0x3, 0x4, 0x9}, {0x7, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x0, 0x2}]}) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10000) 1.126961207s ago: executing program 3 (id=3840): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001200000000000000000000000086ea25a71ff65099e3546499575a0be2b48d45c57fcbbe0f2670c0933704cdf1ec7405bd6aff8a955faeb5e6ae57e3643726a16b5d66da13bf8b589df27ad8ae8cd928e1687f21313b16edbcdfc8bf25ae8a365b8af3bb76abfabed56e6cbdaa1090bd7ee9e6595742e3e0432000f84a36adc51e79"], 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x414, 0x0, 0x8000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}, 0x4000001) 1.055472997s ago: executing program 1 (id=3841): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x82288000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000202000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61}, 0x28) (async) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180401000000000000000000000000008700000000000000", @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x3, 0x105, &(0x7f0000000580)=""/261}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x4482000a, 0x4, 0x0, 0x800}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x90) (async) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) (async) r5 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x114, 0xa, 0x0, 0x4) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) (async) recvmsg(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000900000073114b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0xbe75820fde535162, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x7}, 0x2005, 0x0, 0x52, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 534.587724ms ago: executing program 1 (id=3842): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="553d87000000120b", 0x0, 0x8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) r3 = socket$kcm(0x15, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x1010}, 0xc000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES16], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000300)=@llc={0x1a, 0x320, 0xd, 0x28, 0x2, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x80, 0x0}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 449.386314ms ago: executing program 2 (id=3843): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x1800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910bb000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$kcm(0x11, 0xa, 0x300) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 124.187988ms ago: executing program 2 (id=3844): socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f00000005c0)='U\xf5nT/\bL\xa8\xae)\xaa+\xfd\xf0\x04\xa8\xef\xfdv\xc20_\x10\xa7\xd8\xcc\xd3\x11\xa3F\x92\xc1(p\x80\x8aiHD\xbf\x9f\xee\xber\"\xaf\xe5{>r\xb4\xa1n\x91\xd9\xf5\xef\xa4]P\xc2\xed\xea\x8dK\x1d\xbe\xce\xed\x86|\x8b,J\xae\xa3\xb0\xf3c\xe0\xed+$\au\xd3\x1b\xb6\x7f\x8f\x95i\xa7}mefQn\xb3\xc8+-\xff{\x0e[\xd4\x16\xfeB\x0e\x1b>\xc9\x12\x01D\xc1f\x1e\x12\xafG\xac\xec\xd4\x95\xbay\x82\x89\a\r\xff=\xba\xb3\xe8\xe3P>\xff{\xfcRq1\x16\x14X3\x0e\xbd') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f00000005c0)='U\xf5nT/\bL\xa8\xae)\xaa+\xfd\xf0\x04\xa8\xef\xfdv\xc20_\x10\xa7\xd8\xcc\xd3\x11\xa3F\x92\xc1(p\x80\x8aiHD\xbf\x9f\xee\xber\"\xaf\xe5{>r\xb4\xa1n\x91\xd9\xf5\xef\xa4]P\xc2\xed\xea\x8dK\x1d\xbe\xce\xed\x86|\x8b,J\xae\xa3\xb0\xf3c\xe0\xed+$\au\xd3\x1b\xb6\x7f\x8f\x95i\xa7}mefQn\xb3\xc8+-\xff{\x0e[\xd4\x16\xfeB\x0e\x1b>\xc9\x12\x01D\xc1f\x1e\x12\xafG\xac\xec\xd4\x95\xbay\x82\x89\a\r\xff=\xba\xb3\xe8\xe3P>\xff{\xfcRq1\x16\x14X3\x0e\xbd') bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000008000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000008000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000900000000000000000005"], 0x48) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 0s ago: executing program 3 (id=3845): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socketpair(0x1, 0x805, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000100000000000000", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) (async) socketpair(0x21, 0xe, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x401a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.0.2516'. [ 465.941880][T13430] netlink: 'syz.0.2517': attribute type 27 has an invalid length. [ 465.961502][T13430] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2517'. [ 465.991271][T13431] net_ratelimit: 66 callbacks suppressed [ 465.999351][T13431] sock: sock_set_timeout: `syz.2.2518' (pid 13431) tries to set negative timeout [ 466.738492][T13462] netlink: 'syz.1.2527': attribute type 10 has an invalid length. [ 466.777957][T13462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2527'. [ 466.808644][T13462] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 466.987806][T13466] netlink: 'syz.0.2529': attribute type 10 has an invalid length. [ 467.045366][T13466] bridge0: port 4(ip6gretap0) entered disabled state [ 467.052385][T13466] bridge0: port 3(team0) entered disabled state [ 467.058927][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.066226][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.279913][T13479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2532'. [ 467.389986][T13482] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 467.411481][T13482] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2533'. [ 467.420558][T13482] device bond0 entered promiscuous mode [ 467.554315][T13494] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 467.606651][T13494] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2534'. [ 468.322503][T13504] netlink: 'syz.2.2539': attribute type 21 has an invalid length. [ 468.450185][T13515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2542'. [ 468.648246][T13521] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2541'. [ 469.916843][T13515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2542'. [ 470.255873][T13534] netlink: 'syz.3.2547': attribute type 10 has an invalid length. [ 471.042452][T13560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2556'. [ 471.194080][T13560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2556'. [ 471.266048][T13568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2556'. [ 471.309484][T13570] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2557'. [ 471.557300][T13570] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 472.625467][T13612] sock: sock_set_timeout: `syz.3.2567' (pid 13612) tries to set negative timeout [ 473.594379][T13616] netlink: 463 bytes leftover after parsing attributes in process `syz.4.2568'. [ 473.692957][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2569'. [ 473.705803][T13620] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2570'. [ 473.739154][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2569'. [ 473.785209][T13625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2569'. [ 473.810845][T13620] netlink: 'syz.3.2570': attribute type 10 has an invalid length. [ 474.837140][T13646] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 475.114352][T13664] netlink: 'syz.2.2579': attribute type 3 has an invalid length. [ 475.169187][T13664] __nla_validate_parse: 1 callbacks suppressed [ 475.169202][T13664] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2579'. [ 475.262442][T13670] netlink: 'syz.2.2579': attribute type 3 has an invalid length. [ 475.290087][T13670] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2579'. [ 475.654456][T13687] netlink: 'syz.3.2586': attribute type 10 has an invalid length. [ 475.729356][T13687] team0: Device wg1 is of different type [ 475.965707][T13702] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2588'. [ 476.020495][T13701] netlink: 'syz.2.2589': attribute type 10 has an invalid length. [ 476.134554][T13701] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2589'. [ 476.208716][T13700] netlink: 'syz.2.2589': attribute type 10 has an invalid length. [ 476.235256][T13700] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2589'. [ 477.011192][T13732] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 477.034958][T13732] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 477.071571][T13732] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2597'. [ 477.285651][T13742] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2600'. [ 477.333660][T13744] netlink: 'syz.3.2601': attribute type 10 has an invalid length. [ 477.351855][T13744] bridge0: port 3(dummy0) entered disabled state [ 477.360238][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.368231][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.876473][T13762] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2605'. [ 478.892728][T13793] netlink: 'syz.2.2615': attribute type 21 has an invalid length. [ 478.911262][T13793] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2615'. [ 479.401730][T13808] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2618'. [ 479.592909][T13819] netlink: 'syz.4.2621': attribute type 10 has an invalid length. [ 479.674930][T13819] netlink: 'syz.4.2621': attribute type 11 has an invalid length. [ 479.731862][T13818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.750994][T13830] netlink: 'syz.3.2622': attribute type 29 has an invalid length. [ 484.684822][T13886] __nla_validate_parse: 2 callbacks suppressed [ 484.684840][T13886] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2638'. [ 485.374329][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2646'. [ 486.001009][T13932] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2649'. [ 486.913038][T13960] validate_nla: 1 callbacks suppressed [ 486.913081][T13960] netlink: 'syz.3.2657': attribute type 10 has an invalid length. [ 487.592810][T13966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2658'. [ 487.665739][T13973] netlink: 'syz.3.2660': attribute type 21 has an invalid length. [ 487.702826][T13973] netlink: 'syz.3.2660': attribute type 11 has an invalid length. [ 487.797343][T13978] netlink: 'syz.4.2662': attribute type 2 has an invalid length. [ 487.824837][T13980] netlink: 'syz.0.2663': attribute type 2 has an invalid length. [ 487.835060][T13978] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.2662'. [ 487.845146][T13980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2663'. [ 488.930382][T14029] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2675'. [ 489.687364][T14048] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2680'. [ 489.754083][T14047] delete_channel: no stack [ 490.465891][T14051] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2681'. [ 490.491611][T14059] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2677'. [ 490.776469][ T4287] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 490.790653][T14065] netlink: 'syz.2.2684': attribute type 22 has an invalid length. [ 490.844031][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 490.965500][T14065] device syzkaller0 entered promiscuous mode [ 491.127366][T14080] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 491.163890][T14080] netlink: 'syz.0.2689': attribute type 2 has an invalid length. [ 491.189820][T14080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2689'. [ 491.241973][T14087] netlink: 'syz.4.2690': attribute type 29 has an invalid length. [ 491.455530][T14087] netlink: 'syz.4.2690': attribute type 29 has an invalid length. [ 493.969392][T14130] validate_nla: 2 callbacks suppressed [ 493.969409][T14130] netlink: 'syz.2.2700': attribute type 39 has an invalid length. [ 494.247303][T14130] device hsr_slave_1 left promiscuous mode [ 495.038579][T14148] netlink: 'syz.1.2704': attribute type 21 has an invalid length. [ 495.117037][T14148] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2704'. [ 495.187873][T14148] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2704'. [ 495.676455][T14178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2712'. [ 495.980313][T14190] netlink: 'syz.0.2713': attribute type 13 has an invalid length. [ 496.019654][T14190] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2713'. [ 496.044164][T14190] netlink: 'syz.0.2713': attribute type 13 has an invalid length. [ 496.092937][T14190] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2713'. [ 496.124227][T14194] netlink: 'syz.0.2713': attribute type 10 has an invalid length. [ 496.150878][T14196] netlink: 'syz.3.2717': attribute type 3 has an invalid length. [ 496.178254][T14196] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2717'. [ 496.299818][T14194] device netdevsim0 entered promiscuous mode [ 496.394440][T14194] team0: Port device netdevsim0 added [ 496.400685][T14199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2718'. [ 497.273936][T14225] FAULT_INJECTION: forcing a failure. [ 497.273936][T14225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.351480][T14225] CPU: 0 PID: 14225 Comm: syz.0.2722 Not tainted syzkaller #0 [ 497.359088][T14225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.369184][T14225] Call Trace: [ 497.372507][T14225] [ 497.375479][T14225] dump_stack_lvl+0x188/0x24e [ 497.380200][T14225] ? show_regs_print_info+0x12/0x12 [ 497.385452][T14225] ? load_image+0x400/0x400 [ 497.390014][T14225] ? __lock_acquire+0x7d10/0x7d10 [ 497.395078][T14225] ? trace_call_bpf+0x5d6/0x6b0 [ 497.400034][T14225] should_fail_ex+0x399/0x4d0 [ 497.404752][T14225] _copy_from_user+0x2c/0x170 [ 497.409473][T14225] __sys_bpf+0x2ea/0x780 [ 497.413754][T14225] ? bpf_link_show_fdinfo+0x380/0x380 [ 497.419187][T14225] ? lock_chain_count+0x20/0x20 [ 497.424094][T14225] __x64_sys_bpf+0x78/0x90 [ 497.428552][T14225] do_syscall_64+0x4c/0xa0 [ 497.433030][T14225] ? clear_bhb_loop+0x60/0xb0 [ 497.437762][T14225] ? clear_bhb_loop+0x60/0xb0 [ 497.442496][T14225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.448436][T14225] RIP: 0033:0x7f7f8499cdd9 [ 497.452884][T14225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.472526][T14225] RSP: 002b:00007f7f85816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.481002][T14225] RAX: ffffffffffffffda RBX: 00007f7f84c15fa0 RCX: 00007f7f8499cdd9 [ 497.489005][T14225] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 497.497016][T14225] RBP: 00007f7f85816090 R08: 0000000000000000 R09: 0000000000000000 [ 497.505016][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.513051][T14225] R13: 00007f7f84c16038 R14: 00007f7f84c15fa0 R15: 00007ffda1e975e8 [ 497.521072][T14225] [ 498.344742][ T4273] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 498.828099][T14265] netlink: 'syz.1.2731': attribute type 2 has an invalid length. [ 498.893205][T14265] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2731'. [ 500.411928][ T4273] Bluetooth: hci4: command 0x2016 tx timeout [ 501.203561][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.210195][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.815495][T14363] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2757'. [ 502.032649][ T4287] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 503.622425][T14393] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2766'. [ 503.879006][T14402] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2771'. [ 504.082586][ T4287] Bluetooth: hci2: command 0x2016 tx timeout [ 504.104962][T14407] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2770'. [ 504.479337][T14419] device syzkaller0 entered promiscuous mode [ 508.206379][T14458] netlink: 'syz.1.2781': attribute type 2 has an invalid length. [ 508.215046][T14458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2781'. [ 508.520241][T14471] IPv6: Can't replace route, no match found [ 508.941692][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2792'. [ 509.359158][T14513] sctp: [Deprecated]: syz.2.2798 (pid 14513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.359158][T14513] Use struct sctp_sack_info instead [ 510.040796][T14530] FAULT_INJECTION: forcing a failure. [ 510.040796][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 510.092819][T14530] CPU: 0 PID: 14530 Comm: syz.3.2803 Not tainted syzkaller #0 [ 510.100341][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.110415][T14530] Call Trace: [ 510.113722][T14530] [ 510.116693][T14530] dump_stack_lvl+0x188/0x24e [ 510.121411][T14530] ? show_regs_print_info+0x12/0x12 [ 510.126648][T14530] ? load_image+0x400/0x400 [ 510.131183][T14530] ? __might_sleep+0xd0/0xd0 [ 510.135799][T14530] ? __lock_acquire+0x7d10/0x7d10 [ 510.140863][T14530] should_fail_ex+0x399/0x4d0 [ 510.145570][T14530] should_failslab+0x5/0x20 [ 510.150105][T14530] slab_pre_alloc_hook+0x59/0x310 [ 510.155176][T14530] ? kvmalloc_node+0x6c/0x180 [ 510.159880][T14530] __kmem_cache_alloc_node+0x4f/0x260 [ 510.165269][T14530] ? kvmalloc_node+0x6c/0x180 [ 510.169964][T14530] __kmalloc_node+0xa0/0x240 [ 510.174581][T14530] kvmalloc_node+0x6c/0x180 [ 510.179107][T14530] page_pool_create+0x1e7/0x5c0 [ 510.183979][T14530] bpf_test_run_xdp_live+0x223/0x1a90 [ 510.189369][T14530] ? verify_lock_unused+0x140/0x140 [ 510.194590][T14530] ? kasan_set_track+0x60/0x70 [ 510.199367][T14530] ? kasan_set_track+0x4b/0x70 [ 510.204151][T14530] ? __kasan_kmalloc+0x8e/0xa0 [ 510.208931][T14530] ? bpf_test_init+0x9f/0x140 [ 510.213626][T14530] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 510.219107][T14530] ? bpf_prog_test_run+0x31e/0x390 [ 510.224250][T14530] ? __x64_sys_bpf+0x78/0x90 [ 510.228883][T14530] ? do_syscall_64+0x4c/0xa0 [ 510.233494][T14530] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.239586][T14530] ? xdp_convert_md_to_buff+0x330/0x330 [ 510.245186][T14530] ? __lock_acquire+0x7d10/0x7d10 [ 510.250244][T14530] ? __virt_addr_valid+0x188/0x540 [ 510.255380][T14530] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 510.261643][T14530] ? bpf_test_init+0x119/0x140 [ 510.266424][T14530] ? xdp_convert_md_to_buff+0x5b/0x330 [ 510.271911][T14530] bpf_prog_test_run_xdp+0x736/0xf10 [ 510.277233][T14530] ? dev_put+0x80/0x80 [ 510.281362][T14530] ? dev_put+0x80/0x80 [ 510.285459][T14530] bpf_prog_test_run+0x31e/0x390 [ 510.290421][T14530] __sys_bpf+0x62b/0x780 [ 510.294713][T14530] ? bpf_link_show_fdinfo+0x380/0x380 [ 510.300120][T14530] ? lock_chain_count+0x20/0x20 [ 510.304999][T14530] __x64_sys_bpf+0x78/0x90 [ 510.309459][T14530] do_syscall_64+0x4c/0xa0 [ 510.313895][T14530] ? clear_bhb_loop+0x60/0xb0 [ 510.318596][T14530] ? clear_bhb_loop+0x60/0xb0 [ 510.323299][T14530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.329224][T14530] RIP: 0033:0x7fa85519cdd9 [ 510.333655][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.353388][T14530] RSP: 002b:00007fa8560ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.361817][T14530] RAX: ffffffffffffffda RBX: 00007fa855415fa0 RCX: 00007fa85519cdd9 [ 510.369885][T14530] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 510.377880][T14530] RBP: 00007fa8560ce090 R08: 0000000000000000 R09: 0000000000000000 [ 510.385861][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.393845][T14530] R13: 00007fa855416038 R14: 00007fa855415fa0 R15: 00007ffde15a8058 [ 510.401841][T14530] [ 510.652003][T14530] page_pool_create() gave up with errno -12 [ 510.860258][T14544] netlink: 'syz.2.2808': attribute type 10 has an invalid length. [ 510.898038][T14544] device veth1_macvtap left promiscuous mode [ 513.062807][T14557] netlink: 'syz.3.2812': attribute type 20 has an invalid length. [ 513.071078][T14558] netlink: 'syz.3.2812': attribute type 20 has an invalid length. [ 513.308315][T14583] FAULT_INJECTION: forcing a failure. [ 513.308315][T14583] name failslab, interval 1, probability 0, space 0, times 0 [ 513.364016][T14583] CPU: 0 PID: 14583 Comm: syz.3.2819 Not tainted syzkaller #0 [ 513.371636][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.381733][T14583] Call Trace: [ 513.385059][T14583] [ 513.388039][T14583] dump_stack_lvl+0x188/0x24e [ 513.392773][T14583] ? show_regs_print_info+0x12/0x12 [ 513.398023][T14583] ? load_image+0x400/0x400 [ 513.402571][T14583] ? __might_sleep+0xd0/0xd0 [ 513.407200][T14583] ? __lock_acquire+0x7d10/0x7d10 [ 513.412303][T14583] should_fail_ex+0x399/0x4d0 [ 513.417031][T14583] should_failslab+0x5/0x20 [ 513.421569][T14583] slab_pre_alloc_hook+0x59/0x310 [ 513.426631][T14583] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 513.431951][T14583] __kmem_cache_alloc_node+0x4f/0x260 [ 513.437360][T14583] ? memset+0x1e/0x40 [ 513.441383][T14583] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 513.446707][T14583] kmalloc_trace+0x26/0xe0 [ 513.451175][T14583] __xdp_reg_mem_model+0x1e0/0x5c0 [ 513.456323][T14583] ? kvmalloc_node+0x6c/0x180 [ 513.461044][T14583] ? kvmalloc_node+0x6c/0x180 [ 513.465763][T14583] ? xdp_reg_mem_model+0x30/0x30 [ 513.470752][T14583] xdp_reg_mem_model+0x1e/0x30 [ 513.475557][T14583] bpf_test_run_xdp_live+0x299/0x1a90 [ 513.480974][T14583] ? verify_lock_unused+0x140/0x140 [ 513.486223][T14583] ? kasan_set_track+0x60/0x70 [ 513.491030][T14583] ? kasan_set_track+0x4b/0x70 [ 513.495841][T14583] ? __kasan_kmalloc+0x8e/0xa0 [ 513.500641][T14583] ? bpf_test_init+0x9f/0x140 [ 513.505353][T14583] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 513.510852][T14583] ? bpf_prog_test_run+0x31e/0x390 [ 513.516033][T14583] ? __x64_sys_bpf+0x78/0x90 [ 513.520664][T14583] ? do_syscall_64+0x4c/0xa0 [ 513.525322][T14583] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.531450][T14583] ? xdp_convert_md_to_buff+0x330/0x330 [ 513.533570][T14586] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2817'. [ 513.537046][T14583] ? __lock_acquire+0x7d10/0x7d10 [ 513.537081][T14583] ? __virt_addr_valid+0x188/0x540 [ 513.537116][T14583] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 513.537152][T14583] ? bpf_test_init+0x119/0x140 [ 513.537175][T14583] ? xdp_convert_md_to_buff+0x5b/0x330 [ 513.537204][T14583] bpf_prog_test_run_xdp+0x736/0xf10 [ 513.537256][T14583] ? dev_put+0x80/0x80 [ 513.537291][T14583] ? dev_put+0x80/0x80 [ 513.537313][T14583] bpf_prog_test_run+0x31e/0x390 [ 513.537345][T14583] __sys_bpf+0x62b/0x780 [ 513.537374][T14583] ? bpf_link_show_fdinfo+0x380/0x380 [ 513.537417][T14583] ? lock_chain_count+0x20/0x20 [ 513.537453][T14583] __x64_sys_bpf+0x78/0x90 [ 513.537480][T14583] do_syscall_64+0x4c/0xa0 [ 513.537507][T14583] ? clear_bhb_loop+0x60/0xb0 [ 513.537532][T14583] ? clear_bhb_loop+0x60/0xb0 [ 513.537560][T14583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.537585][T14583] RIP: 0033:0x7fa85519cdd9 [ 513.537603][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.537621][T14583] RSP: 002b:00007fa8560ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.537643][T14583] RAX: ffffffffffffffda RBX: 00007fa855415fa0 RCX: 00007fa85519cdd9 [ 513.537658][T14583] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 513.537671][T14583] RBP: 00007fa8560ce090 R08: 0000000000000000 R09: 0000000000000000 [ 513.537683][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.537696][T14583] R13: 00007fa855416038 R14: 00007fa855415fa0 R15: 00007ffde15a8058 [ 513.537735][T14583] [ 514.251532][T14604] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2825'. [ 514.317245][T14604] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2825'. [ 514.329383][T14609] netlink: 'syz.1.2826': attribute type 3 has an invalid length. [ 514.349664][T14609] netlink: 'syz.1.2826': attribute type 1 has an invalid length. [ 514.392574][T14609] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2826'. [ 514.653755][T14623] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2832'. [ 514.705349][T14623] netlink: 'syz.3.2832': attribute type 13 has an invalid length. [ 514.736193][T14623] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2832'. [ 514.845832][T14635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2836'. [ 514.917716][T14638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.925013][T14638] IPv6: NLM_F_CREATE should be set when creating new route [ 514.932305][T14638] IPv6: NLM_F_CREATE should be set when creating new route [ 514.939545][T14638] IPv6: NLM_F_CREATE should be set when creating new route [ 515.177776][T14646] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2838'. [ 515.558332][T14657] device lo left promiscuous mode [ 515.657784][T14662] device lo entered promiscuous mode [ 515.908166][T14666] tun1: tun_chr_ioctl cmd 1074025675 [ 515.914404][T14666] tun1: persist enabled [ 515.920217][T14666] tun1: tun_chr_ioctl cmd 1074025675 [ 515.928383][T14666] tun1: persist enabled [ 516.320780][T14691] netlink: 'syz.0.2852': attribute type 3 has an invalid length. [ 516.330821][T14691] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2852'. [ 516.355194][T14694] netlink: 'syz.3.2854': attribute type 21 has an invalid length. [ 516.381542][T14694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2854'. [ 518.157847][T14735] netlink: zone id is out of range [ 518.183369][T14735] netlink: zone id is out of range [ 518.206301][T14735] netlink: zone id is out of range [ 518.221410][T14735] netlink: zone id is out of range [ 518.237028][T14735] netlink: zone id is out of range [ 518.261365][T14735] netlink: zone id is out of range [ 518.629915][T14750] tc_dump_action: action bad kind [ 518.694401][T14750] netlink: 'syz.4.2869': attribute type 19 has an invalid length. [ 519.334892][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.343847][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.351502][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.359188][T14773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.367274][T14773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 519.376283][T14773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 519.730629][ T7585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.756633][T14776] device pim6reg1 entered promiscuous mode [ 519.867187][ T7585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.065911][ T7585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.223027][ T7585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.467103][T14800] netlink: 'syz.3.2882': attribute type 21 has an invalid length. [ 520.475892][T14800] __nla_validate_parse: 2 callbacks suppressed [ 520.475973][T14800] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2882'. [ 520.773565][T14771] chnl_net:caif_netlink_parms(): no params data found [ 520.839541][ T7585] device 0 left promiscuous mode [ 520.939834][ T7585] device 0 left promiscuous mode [ 521.059585][ T7585] tipc: Left network mode [ 521.441518][T14773] Bluetooth: hci0: command 0x0409 tx timeout [ 521.472765][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.497740][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.508026][T14771] device bridge_slave_0 entered promiscuous mode [ 521.581107][T14828] sctp: [Deprecated]: syz.3.2889 (pid 14828) Use of int in max_burst socket option deprecated. [ 521.581107][T14828] Use struct sctp_assoc_value instead [ 521.634488][T14771] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.652184][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.675104][T14771] device bridge_slave_1 entered promiscuous mode [ 522.030433][T14771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.161103][T14771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.697361][T14771] team0: Port device team_slave_0 added [ 522.807615][T14771] team0: Port device team_slave_1 added [ 523.064966][T14771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.102464][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.213277][T14771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.402362][T14851] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2893'. [ 523.421250][T14771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.430157][T14771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.489563][T14771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.531815][T14773] Bluetooth: hci0: command 0x041b tx timeout [ 524.409786][T14771] device hsr_slave_0 entered promiscuous mode [ 524.449890][T14771] device hsr_slave_1 entered promiscuous mode [ 524.519171][T14869] netlink: 'syz.4.2897': attribute type 10 has an invalid length. [ 524.607082][T14869] bridge0: port 3(team0) entered disabled state [ 524.653257][T14869] device team0 left promiscuous mode [ 524.660930][T14869] device team_slave_0 left promiscuous mode [ 524.683166][T14869] device team_slave_1 left promiscuous mode [ 524.691163][T14869] device geneve1 left promiscuous mode [ 524.701185][T14869] device wlan1 left promiscuous mode [ 524.729173][T14869] bridge0: port 3(team0) entered disabled state [ 524.897650][T14869] wlan1: mtu less than device minimum [ 524.931418][T14869] team0: Device wlan1 failed to change mtu [ 524.942547][T14869] bond0: (slave team0): Error -22 calling dev_set_mtu [ 525.601598][T14773] Bluetooth: hci0: command 0x040f tx timeout [ 525.954292][ T7585] device veth0_macvtap left promiscuous mode [ 525.982300][ T7585] device veth1_vlan left promiscuous mode [ 527.686715][T14773] Bluetooth: hci0: command 0x0419 tx timeout [ 528.157618][ T7585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.539480][ T7585] bond0 (unregistering): Released all slaves [ 528.599592][T14912] netlink: 'syz.3.2906': attribute type 10 has an invalid length. [ 528.619768][T14912] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2906'. [ 528.650825][T14912] device batadv_slave_1 entered promiscuous mode [ 529.442101][T14928] netlink: 'syz.3.2907': attribute type 3 has an invalid length. [ 529.471633][T14928] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2907'. [ 529.522580][T14927] device wg2 entered promiscuous mode [ 530.286455][T14771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 530.516628][T14771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 530.564019][T14771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 530.652353][T14771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.198817][T14771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.321598][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.339359][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.378758][T14771] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.406672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 531.424257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.457293][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.464523][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.516191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.558906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.579443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.619815][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.627053][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.671018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.696985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.741070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.770165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.809818][T14771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.861372][T14771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.895057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.917938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.948028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.960700][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 531.982232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.008343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.028516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.048678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.070370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.585182][T14972] device syzkaller0 entered promiscuous mode [ 534.366959][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.376687][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.440057][T14771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.524389][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 534.535309][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.600579][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.615309][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.656887][T14771] device veth0_vlan entered promiscuous mode [ 534.675833][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 534.686496][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 534.726313][T14771] device veth1_vlan entered promiscuous mode [ 534.760525][T14999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2922'. [ 534.957448][T15004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2922'. [ 535.045687][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 535.075708][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 535.109057][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.149496][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.190528][T14771] device veth0_macvtap entered promiscuous mode [ 535.251247][T14771] device veth1_macvtap entered promiscuous mode [ 535.438413][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 535.454084][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.483464][T14771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.579412][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.591204][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.609483][T14771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.641118][T14771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.674661][T14771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.719416][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 535.733067][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 535.764789][T14771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.783689][T14771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.796970][T14771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.809800][T14771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.186521][ T7581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.202001][ T7581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.232978][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 536.326957][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.335468][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.354330][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.623392][T15040] delete_channel: no stack [ 537.134696][T15070] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2934'. [ 537.967651][T15082] netlink: 'syz.1.2939': attribute type 10 has an invalid length. [ 538.085882][T15082] team0: Port device geneve1 added [ 538.799932][T15108] netlink: 'syz.4.2946': attribute type 21 has an invalid length. [ 538.815367][T15108] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2946'. [ 538.842781][T15108] netlink: 'syz.4.2946': attribute type 5 has an invalid length. [ 538.861990][T15115] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2945'. [ 540.750600][T15183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2960'. [ 541.083854][T15190] netlink: 'syz.2.2961': attribute type 10 has an invalid length. [ 541.349329][T15197] netlink: 'syz.4.2964': attribute type 21 has an invalid length. [ 541.389372][T15197] netlink: 'syz.4.2964': attribute type 6 has an invalid length. [ 541.435632][T15197] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2964'. [ 541.684665][T15205] netlink: 'syz.0.2967': attribute type 2 has an invalid length. [ 541.747654][T15205] netlink: 'syz.0.2967': attribute type 8 has an invalid length. [ 541.803829][T15205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2967'. [ 541.901156][T15212] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2968'. [ 542.002142][T15212] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 542.094196][T15212] CPU: 0 PID: 15212 Comm: syz.3.2968 Not tainted syzkaller #0 [ 542.102008][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 542.112102][T15212] Call Trace: [ 542.115449][T15212] [ 542.118422][T15212] dump_stack_lvl+0x188/0x24e [ 542.123170][T15212] ? show_regs_print_info+0x12/0x12 [ 542.128430][T15212] ? load_image+0x400/0x400 [ 542.133014][T15212] sysfs_warn_dup+0x8a/0xa0 [ 542.137576][T15212] sysfs_do_create_link_sd+0xc0/0x110 [ 542.143021][T15212] device_add+0x7ed/0xfb0 [ 542.147408][T15212] wiphy_register+0x1d9f/0x2ac0 [ 542.152366][T15212] ? cfg80211_event_work+0x40/0x40 [ 542.157545][T15212] ? ieee80211_init_rate_ctrl_alg+0x4d9/0x5e0 [ 542.163663][T15212] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 542.169785][T15212] ieee80211_register_hw+0x2d00/0x39f0 [ 542.175323][T15212] ? ieee80211_register_hw+0xf21/0x39f0 [ 542.180926][T15212] ? ieee80211_register_hw+0xf21/0x39f0 [ 542.186536][T15212] ? ieee80211_tasklet_handler+0x20/0x20 [ 542.192239][T15212] ? memset+0x1e/0x40 [ 542.196273][T15212] ? __hrtimer_init+0x186/0x270 [ 542.201180][T15212] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 542.206975][T15212] hwsim_new_radio_nl+0xafa/0xce0 [ 542.212081][T15212] genl_family_rcv_msg_doit+0x22a/0x330 [ 542.217787][T15212] ? end_current_label_crit_section+0x170/0x170 [ 542.224080][T15212] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 542.230001][T15212] ? bpf_lsm_capable+0x5/0x10 [ 542.234703][T15212] ? security_capable+0x85/0xb0 [ 542.239591][T15212] genl_rcv_msg+0x604/0x790 [ 542.244136][T15212] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 542.250317][T15212] ? genl_bind+0x360/0x360 [ 542.254759][T15212] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 542.261134][T15212] ? lock_acquire+0x225/0x4a0 [ 542.265845][T15212] netlink_rcv_skb+0x1fb/0x450 [ 542.270636][T15212] ? genl_bind+0x360/0x360 [ 542.275073][T15212] ? netlink_ack+0x1170/0x1170 [ 542.279890][T15212] ? down_read+0x1a8/0x2d0 [ 542.284364][T15212] genl_rcv+0x24/0x40 [ 542.288370][T15212] netlink_unicast+0x74d/0x8d0 [ 542.293165][T15212] netlink_sendmsg+0x8ad/0xbd0 [ 542.298049][T15212] ? netlink_getsockopt+0x550/0x550 [ 542.303276][T15212] ? aa_sock_msg_perm+0x94/0x150 [ 542.308237][T15212] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 542.313544][T15212] ? security_socket_sendmsg+0x7c/0xa0 [ 542.319035][T15212] ? netlink_getsockopt+0x550/0x550 [ 542.324269][T15212] ____sys_sendmsg+0x5be/0x970 [ 542.329084][T15212] ? __sys_sendmsg_sock+0x30/0x30 [ 542.334144][T15212] ? __import_iovec+0x315/0x500 [ 542.339019][T15212] ? import_iovec+0x6f/0xa0 [ 542.343559][T15212] ___sys_sendmsg+0x2a2/0x360 [ 542.348275][T15212] ? __sys_sendmsg+0x290/0x290 [ 542.353083][T15212] ? ktime_get_real_ts64+0x440/0x440 [ 542.358435][T15212] __se_sys_sendmsg+0x1bb/0x2a0 [ 542.363322][T15212] ? __x64_sys_sendmsg+0x80/0x80 [ 542.368299][T15212] ? lockdep_hardirqs_on+0x94/0x140 [ 542.373545][T15212] do_syscall_64+0x4c/0xa0 [ 542.377988][T15212] ? clear_bhb_loop+0x60/0xb0 [ 542.382681][T15212] ? clear_bhb_loop+0x60/0xb0 [ 542.387384][T15212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.393350][T15212] RIP: 0033:0x7fa85519cdd9 [ 542.397787][T15212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.417414][T15212] RSP: 002b:00007fa8560ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.425864][T15212] RAX: ffffffffffffffda RBX: 00007fa855416090 RCX: 00007fa85519cdd9 [ 542.433856][T15212] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 542.441838][T15212] RBP: 00007fa855232d69 R08: 0000000000000000 R09: 0000000000000000 [ 542.449828][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.457816][T15212] R13: 00007fa855416128 R14: 00007fa855416090 R15: 00007ffde15a8058 [ 542.465830][T15212] [ 542.792188][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 542.802546][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 542.810377][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 542.818552][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 542.831665][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 542.838927][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.333536][T15237] device syzkaller0 entered promiscuous mode [ 543.541942][ T7589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.881963][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 546.961575][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 547.857128][ T7589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.870265][T15278] netlink: 'syz.3.2981': attribute type 10 has an invalid length. [ 547.904927][T15300] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2986'. [ 547.930802][T15233] chnl_net:caif_netlink_parms(): no params data found [ 548.004440][ T7589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.133414][ T7589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.193062][T15308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2987'. [ 548.260249][T15233] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.281912][T15233] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.290366][T15233] device bridge_slave_0 entered promiscuous mode [ 548.301200][T15233] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.308668][T15233] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.317218][T15233] device bridge_slave_1 entered promiscuous mode [ 548.352672][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.362436][T15320] netlink: 'syz.1.2990': attribute type 10 has an invalid length. [ 548.446999][T15320] team0: Device veth1_macvtap failed to register rx_handler [ 548.518654][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.564688][T15330] netlink: 'syz.3.2992': attribute type 3 has an invalid length. [ 548.598796][T15330] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2992'. [ 549.047037][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 549.539304][T15233] team0: Port device team_slave_0 added [ 549.597764][T15233] team0: Port device team_slave_1 added [ 549.770521][ T7589] tipc: Left network mode [ 549.775467][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.793096][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.865374][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.187213][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.195599][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.326221][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.678719][T15233] device hsr_slave_0 entered promiscuous mode [ 550.722424][T15233] device hsr_slave_1 entered promiscuous mode [ 550.737740][T15233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.764391][T15233] Cannot create hsr debugfs directory [ 550.770203][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 551.121972][T14773] Bluetooth: hci5: command 0x0419 tx timeout [ 552.046216][T15408] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3009'. [ 553.886449][T15233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.064614][ T7589] device hsr_slave_0 left promiscuous mode [ 554.098572][T15453] can: request_module (can-proto-4) failed. [ 554.108239][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.121537][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.138993][ T7589] bridge0: port 4(dummy0) entered disabled state [ 554.161332][T15468] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 554.223011][T15468] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 554.233084][T15468] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 554.244071][T15468] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 554.256464][T15468] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 554.278883][T15468] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 554.329165][ T7589] bridge0: port 3(hsr0) entered disabled state [ 554.353069][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.382479][ T7589] device bridge_slave_0 left promiscuous mode [ 554.389634][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.382328][ T7589] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 555.402154][ T7589] device batadv_slave_0 left promiscuous mode [ 555.545930][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.878778][ T7589] bond0 (unregistering): Released all slaves [ 555.995054][T15233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 556.011963][T15233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 556.031676][T15233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 556.360063][T15233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.442494][T15233] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.449476][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.494711][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.539921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.568416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.642665][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.649860][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.659826][T15518] netlink: 'syz.1.3035': attribute type 29 has an invalid length. [ 556.771430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.779546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.796881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.812505][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.819688][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.851239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.878646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.899203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.934390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.981766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.011434][T15518] netlink: 'syz.1.3035': attribute type 29 has an invalid length. [ 557.075431][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.109391][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.188012][T15515] netlink: 'syz.1.3035': attribute type 29 has an invalid length. [ 557.227950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.245309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.260908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.307825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.343164][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.066564][T15534] device wlan1 left promiscuous mode [ 558.651927][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.666532][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.729081][T15233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.816340][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 558.838954][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.886326][T15576] delete_channel: no stack [ 558.935018][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.949502][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.964542][T15233] device veth0_vlan entered promiscuous mode [ 558.974804][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.983875][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.997137][T15233] device veth1_vlan entered promiscuous mode [ 559.042293][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 559.063643][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 559.095612][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.123310][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.155729][T15233] device veth0_macvtap entered promiscuous mode [ 559.187303][T15233] device veth1_macvtap entered promiscuous mode [ 559.232485][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.240581][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 559.328436][T15233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.372862][T15233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.407746][T15233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.441226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.489859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.533788][T15233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.553702][T15233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.589622][T15233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.679773][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 559.708641][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.742020][T14773] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 559.754937][T15233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.788435][T15233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.805856][T15604] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3052'. [ 559.815418][T15233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.827784][T15233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.842791][T15600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3052'. [ 560.100469][ T7581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.120522][ T7581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.154462][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.168564][T15618] netlink: 'syz.1.3056': attribute type 16 has an invalid length. [ 560.190944][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.192075][T15618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3056'. [ 560.209026][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.227034][T15618] netlink: 'syz.1.3056': attribute type 10 has an invalid length. [ 560.346302][T15618] team0: Port device macvlan0 added [ 560.380354][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 560.645504][T15622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3057'. [ 560.729863][T15622] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3057'. [ 562.161645][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 562.175819][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 562.184677][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 562.194374][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 562.206543][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 562.214220][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.570378][T15660] chnl_net:caif_netlink_parms(): no params data found [ 562.651631][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.658076][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.756862][T15660] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.767943][T15660] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.776613][T15660] device bridge_slave_0 entered promiscuous mode [ 562.789763][T15660] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.805065][T15660] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.826587][T15660] device bridge_slave_1 entered promiscuous mode [ 562.905836][T15660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.949390][T15660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.026877][T15660] team0: Port device team_slave_0 added [ 563.036379][T15660] team0: Port device team_slave_1 added [ 563.071154][T15660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.078549][T15660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.109165][T15660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.126895][T15660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.134073][T15660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.167134][T15660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.267714][T15660] device hsr_slave_0 entered promiscuous mode [ 564.279285][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 564.296306][T15660] device hsr_slave_1 entered promiscuous mode [ 564.356035][T15660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.421394][T15660] Cannot create hsr debugfs directory [ 565.019714][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.028742][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.180375][T15660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.228847][T15700] netlink: 'syz.2.3073': attribute type 13 has an invalid length. [ 565.241890][T15700] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3073'. [ 565.311223][T15700] erspan0: refused to change device tx_queue_len [ 565.431549][T15660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.600612][T15709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.607914][T15709] IPv6: NLM_F_CREATE should be set when creating new route [ 565.615243][T15709] IPv6: NLM_F_CREATE should be set when creating new route [ 565.622512][T15709] IPv6: NLM_F_CREATE should be set when creating new route [ 565.648069][T15715] netlink: 'syz.4.3077': attribute type 33 has an invalid length. [ 565.659460][T15715] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3077'. [ 565.720712][T15660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.820831][T15660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.408296][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 566.961727][T15732] netlink: 'syz.0.3082': attribute type 10 has an invalid length. [ 566.989677][T15732] team0: Device bridge0 is already an upper device of the team interface [ 567.243492][T15735] delete_channel: no stack [ 567.248544][T15735] delete_channel: no stack [ 567.447973][T15660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 568.492424][T14773] Bluetooth: hci2: command 0x040f tx timeout [ 570.503351][T15753] netlink: 'syz.0.3091': attribute type 23 has an invalid length. [ 570.511249][T15753] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3091'. [ 570.561615][T14773] Bluetooth: hci2: command 0x0419 tx timeout [ 570.635061][T15660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 570.653094][T15660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 570.664996][T15660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 570.729279][T15760] netlink: 'syz.2.3094': attribute type 14 has an invalid length. [ 570.767213][T15764] netlink: 'syz.0.3095': attribute type 10 has an invalid length. [ 570.776139][T15764] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3095'. [ 570.891498][T15766] netlink: 'syz.4.3097': attribute type 27 has an invalid length. [ 570.912822][ T7609] device ip6gretap0 left promiscuous mode [ 570.918700][ T7609] : port 1(ip6gretap0) entered disabled state [ 570.925244][T15766] netlink: 'syz.4.3097': attribute type 3 has an invalid length. [ 571.080140][T15774] netlink: 'syz.4.3099': attribute type 27 has an invalid length. [ 571.090442][T15774] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3099'. [ 571.873293][T15790] netlink: 'syz.2.3103': attribute type 28 has an invalid length. [ 571.891401][T15790] netlink: 'syz.2.3103': attribute type 29 has an invalid length. [ 571.899598][T15790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3103'. [ 572.071107][T15660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.141727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 572.175737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.224002][T15660] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.282091][T15802] netlink: 'syz.1.3106': attribute type 16 has an invalid length. [ 572.290428][T15802] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3106'. [ 572.525409][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 572.542760][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 572.570855][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.578038][ T7585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.590783][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 572.599816][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 572.612109][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.619355][ T7585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.632660][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 572.640617][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 572.643762][T15821] delete_channel: no stack [ 572.751437][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 572.765324][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 572.777418][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 572.804012][T15826] delete_channel: no stack [ 572.851548][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 572.863916][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 572.874918][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 572.919614][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 572.962104][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 572.996724][T15660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.014979][T15660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 573.049317][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 573.058534][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 573.076578][T15840] netlink: 'syz.1.3116': attribute type 7 has an invalid length. [ 573.088365][T15840] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.3116'. [ 573.306440][T15845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3118'. [ 573.405453][T15845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3118'. [ 573.678737][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.686509][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 573.772485][T15660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.781030][ T7609] bridge0: port 3(dummy0) entered disabled state [ 573.810909][ T7609] device bridge_slave_1 left promiscuous mode [ 573.829910][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.970695][ T7609] device bridge_slave_0 left promiscuous mode [ 573.980644][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.565276][ T7609] team0 (unregistering): Port device team_slave_1 removed [ 574.642228][ T7609] team0 (unregistering): Port device team_slave_0 removed [ 574.769100][ T7609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.867368][T15878] can: request_module (can-proto-0) failed. [ 575.220453][ T7609] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 575.230186][ T7609] bond0 (unregistering): Released all slaves [ 575.353387][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 575.362688][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.384641][T15869] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.3123'. [ 575.402691][T15881] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3126'. [ 575.494814][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 575.513746][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 575.526790][T15660] device veth0_vlan entered promiscuous mode [ 575.560811][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 575.605667][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.627875][T15660] device veth1_vlan entered promiscuous mode [ 575.775082][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 575.788330][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 575.846327][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 575.874948][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 575.915162][T15660] device veth0_macvtap entered promiscuous mode [ 575.998115][T15660] device veth1_macvtap entered promiscuous mode [ 576.061037][T15660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.118111][T15660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.133452][T15660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.144158][T15660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.156209][T15660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.167147][T15660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.177740][T15660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.187637][T15660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.205951][T15660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.245403][T15660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.270423][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 576.299360][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 576.317931][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 576.367584][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 576.416786][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 576.445824][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.477069][T15660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.497983][T15660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.515723][T15660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.533482][T15660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.730040][T15921] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3137'. [ 577.160394][ T7609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.178568][ T7609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.219422][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 577.246048][ T7609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.272030][ T7609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.280193][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 577.467635][T15938] validate_nla: 1 callbacks suppressed [ 577.467651][T15938] netlink: 'syz.3.3061': attribute type 21 has an invalid length. [ 577.559488][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3061'. [ 577.821178][T15949] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3145'. [ 578.233598][T14773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 578.245618][T14773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 578.253320][T14773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 578.264221][T14773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 578.274028][T14773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 578.281372][T14773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.331674][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 580.494683][T15949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.530861][T15949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.561099][T15949] bond0 (unregistering): Released all slaves [ 580.737587][ T7591] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.950455][ T7591] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.093539][ T7591] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.283391][ T7591] device netdevsim0 left promiscuous mode [ 581.321171][ T7591] team0: Port device netdevsim0 removed [ 581.357324][ T7591] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.396497][T15958] chnl_net:caif_netlink_parms(): no params data found [ 581.506997][T15984] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3154'. [ 581.806164][T15958] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.832047][T15958] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.862889][T15958] device bridge_slave_0 entered promiscuous mode [ 581.921694][T15958] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.928822][T15958] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.984615][T15958] device bridge_slave_1 entered promiscuous mode [ 582.007183][T15989] netlink: 'syz.1.3155': attribute type 21 has an invalid length. [ 582.023556][T15989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3155'. [ 582.116925][ T7591] tipc: Left network mode [ 582.138154][T15958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.308012][ T7591] device ip6gretap0 left promiscuous mode [ 582.316521][T15998] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3156'. [ 582.332149][ T7591] bridge0: port 4(ip6gretap0) entered disabled state [ 582.359381][T15958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.394892][T15998] openvswitch: netlink: Flow key attr not present in new flow. [ 582.411604][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 582.504300][T15958] team0: Port device team_slave_0 added [ 582.546798][T15958] team0: Port device team_slave_1 added [ 582.561772][T16005] netlink: 'syz.4.3159': attribute type 2 has an invalid length. [ 582.621044][T16005] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3159'. [ 582.736989][T15958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.789845][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.828761][T15958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.968886][T16023] netlink: 3291 bytes leftover after parsing attributes in process `syz.2.3162'. [ 583.118297][T15958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.163295][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.227176][T15958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.349362][T16036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3166'. [ 583.563502][T15958] device hsr_slave_0 entered promiscuous mode [ 583.592834][T15958] device hsr_slave_1 entered promiscuous mode [ 583.605786][T15958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.630837][T15958] Cannot create hsr debugfs directory [ 583.992725][T16063] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3171'. [ 584.059703][T16063] openvswitch: netlink: Flow key attr not present in new flow. [ 584.160158][T16068] netlink: 'syz.3.3173': attribute type 21 has an invalid length. [ 584.184937][T16068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3173'. [ 584.481833][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 584.722073][T16082] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3177'. [ 584.956394][T16085] netlink: 'syz.2.3178': attribute type 1 has an invalid length. [ 585.331142][ T7591] bridge0: port 3(team0) entered disabled state [ 585.345064][ T7591] device bridge_slave_1 left promiscuous mode [ 585.370578][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.385574][ T7591] device bridge_slave_0 left promiscuous mode [ 585.401527][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.442774][ T7591] device veth1_vlan left promiscuous mode [ 585.448865][ T7591] device veth0_vlan left promiscuous mode [ 585.746162][T16119] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3184'. [ 585.834452][T16119] openvswitch: netlink: Flow key attr not present in new flow. [ 586.116243][ T7591] device geneve1 left promiscuous mode [ 586.144417][ T7591] team0 (unregistering): Port device geneve1 removed [ 586.567525][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 586.671703][ T7591] device team_slave_1 left promiscuous mode [ 586.678764][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 587.007151][T16132] netlink: 'syz.2.3187': attribute type 21 has an invalid length. [ 587.021388][T16132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3187'. [ 587.303616][T15958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 587.355737][T15958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 587.430423][T15958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 587.475113][T15958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 587.526079][T16157] netlink: 'syz.1.3196': attribute type 2 has an invalid length. [ 587.677027][T16163] netlink: 'syz.4.3197': attribute type 21 has an invalid length. [ 587.892441][T15958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.920296][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 587.939941][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.016227][T15958] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.044516][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.072370][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.092885][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.100053][ T7589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.175509][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.206123][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.226308][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.257625][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.264901][ T7589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.307355][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.369658][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.380807][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.425923][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.476540][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 588.498208][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 588.530343][T15958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.560275][T15958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.595079][T16188] netlink: 'syz.2.3203': attribute type 21 has an invalid length. [ 588.642475][T16188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3203'. [ 588.671464][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.696162][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 588.772785][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.869362][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 588.969305][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.035383][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 589.710304][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.718778][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 589.831211][T15958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.892858][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.932254][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.945249][T16260] netlink: 'syz.1.3218': attribute type 21 has an invalid length. [ 589.968323][T16260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3218'. [ 590.036993][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 590.049812][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.112216][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.182881][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 590.224528][T15958] device veth0_vlan entered promiscuous mode [ 590.293902][T15958] device veth1_vlan entered promiscuous mode [ 590.313296][T16265] IPv6: Can't replace route, no match found [ 590.348202][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 590.373279][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 590.396410][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 590.432438][ T7591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.474542][T15958] device veth0_macvtap entered promiscuous mode [ 590.506952][T15958] device veth1_macvtap entered promiscuous mode [ 590.567832][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.580669][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.597106][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.621428][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.657757][T15958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.693517][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 590.706297][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 590.724556][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 590.757705][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 590.791735][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.821432][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.841469][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.891444][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.919636][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.950605][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.973086][T15958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.999193][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 591.018227][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 591.050218][T15958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.072513][T15958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.097364][T15958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.121154][T15958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.217315][T16290] netlink: 'syz.3.3225': attribute type 4 has an invalid length. [ 591.268123][T16290] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3225'. [ 591.308103][T16293] netlink: 'syz.2.3227': attribute type 39 has an invalid length. [ 591.692224][T16304] netlink: 'syz.4.3228': attribute type 2 has an invalid length. [ 591.950808][ T7589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.977733][ T7589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.007505][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 592.632912][T16321] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3229'. [ 592.660146][ T7585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.685123][ T7585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.785854][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 593.026164][T16337] netlink: 'syz.1.3235': attribute type 21 has an invalid length. [ 593.069704][T16337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3235'. [ 594.262701][T16364] netlink: 'syz.0.3241': attribute type 2 has an invalid length. [ 594.368462][T16367] netlink: 'syz.1.3242': attribute type 29 has an invalid length. [ 594.381037][T16367] netlink: 'syz.1.3242': attribute type 29 has an invalid length. [ 595.774357][T16342] delete_channel: no stack [ 597.177633][T16395] netlink: 'syz.3.3250': attribute type 21 has an invalid length. [ 597.243281][T16395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3250'. [ 597.636381][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.645514][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.653781][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.662576][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.670344][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 597.678371][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.726035][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.890381][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.066904][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.234792][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.340083][T16417] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3254'. [ 598.476052][T16405] chnl_net:caif_netlink_parms(): no params data found [ 598.561234][T16405] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.569295][T16405] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.577824][T16405] device bridge_slave_0 entered promiscuous mode [ 598.587086][T16405] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.595088][T16405] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.604167][T16405] device bridge_slave_1 entered promiscuous mode [ 598.631188][T16405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.644946][T16405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.678435][T16405] team0: Port device team_slave_0 added [ 598.687760][T16405] team0: Port device team_slave_1 added [ 598.710428][T16405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.721973][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.819893][T16405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.832322][T16430] netlink: 'syz.1.3258': attribute type 6 has an invalid length. [ 598.855574][T16405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.890058][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.932141][T16430] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3258'. [ 598.991468][T16405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.124083][T16405] device hsr_slave_0 entered promiscuous mode [ 599.141466][T16405] device hsr_slave_1 entered promiscuous mode [ 599.159176][T16405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.179985][T16405] Cannot create hsr debugfs directory [ 599.542201][T16448] netlink: 'syz.2.3263': attribute type 10 has an invalid length. [ 599.571033][T16448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3263'. [ 599.685806][T16444] netlink: 'syz.1.3262': attribute type 21 has an invalid length. [ 599.766617][T14773] Bluetooth: hci3: command 0x0409 tx timeout [ 599.775446][T16444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3262'. [ 599.841834][T16448] netlink: 'syz.2.3263': attribute type 10 has an invalid length. [ 599.863754][T16448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3263'. [ 599.980683][T16448] netlink: 'syz.2.3263': attribute type 10 has an invalid length. [ 600.548671][T14773] Bluetooth: hci2: unexpected event 0x31 length: 151 > 6 [ 600.592966][T16470] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3267'. [ 600.678303][T16475] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3268'. [ 601.462626][T16405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 601.473375][T16405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 601.545305][T16405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 601.602327][T16405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.841573][T14773] Bluetooth: hci3: command 0x041b tx timeout [ 601.934668][ T35] team0: Port device wlan1 removed [ 602.042055][T16482] delete_channel: no stack [ 602.328735][T16501] netlink: 'syz.2.3274': attribute type 21 has an invalid length. [ 602.360947][T16501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3274'. [ 602.419785][T16405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.563636][T16498] device pim6reg1 entered promiscuous mode [ 602.584767][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 602.604626][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 602.776191][T16405] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.812998][ T35] device bridge_slave_1 left promiscuous mode [ 602.819340][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.869903][ T35] device bridge_slave_0 left promiscuous mode [ 602.898259][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.520923][ T35] team0 (unregistering): Port device geneve1 removed [ 603.775119][ T35] team0 (unregistering): Port device team_slave_1 removed [ 603.810594][ T35] team0 (unregistering): Port device team_slave_0 removed [ 603.847045][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.921484][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 604.112783][ T35] bond0 (unregistering): Released all slaves [ 604.207065][T16535] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3279'. [ 604.221925][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.231799][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.240285][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.247445][ T7589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.301135][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 604.321748][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 604.330764][ T7589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.339681][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.346831][ T7589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.363208][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 604.374403][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 604.418677][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 604.452999][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 604.465112][T16543] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3282'. [ 604.478150][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 604.491173][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.507750][T16405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 604.529391][T16405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.573003][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 604.600100][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.614856][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.626574][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.639980][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 604.683691][T16543] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 604.740921][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 605.292962][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.322132][ T7581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.354769][T16405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.613250][T16566] netlink: 'syz.0.3287': attribute type 21 has an invalid length. [ 605.660163][T16566] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3287'. [ 606.004506][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 606.247927][T16570] delete_channel: no stack [ 606.467261][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 606.487688][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 606.567516][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 606.614258][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.666481][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.726980][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 606.764286][T16405] device veth0_vlan entered promiscuous mode [ 606.811954][T16405] device veth1_vlan entered promiscuous mode [ 606.927079][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 606.957892][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 606.992567][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 607.045778][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 607.077033][T16405] device veth0_macvtap entered promiscuous mode [ 607.099539][T16616] netlink: 'syz.2.3300': attribute type 21 has an invalid length. [ 607.110791][T16616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3300'. [ 607.167695][T16405] device veth1_macvtap entered promiscuous mode [ 607.218579][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.248649][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.260476][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.276645][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.289314][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.307798][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.320171][T16405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.334304][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 607.347518][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 607.360726][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 607.406834][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 607.443697][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.457007][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.468490][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.479418][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.494864][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.505820][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.521623][T16405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.542948][T16405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.563364][T16405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.589669][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.603824][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.643860][T16627] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3303'. [ 607.686988][T16405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.701821][T16405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.710634][T16405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.752829][T16405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.068085][ T7609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.095363][ T7609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.142601][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.200121][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.218784][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.257905][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.721964][T16641] delete_channel: no stack [ 608.836122][T16655] netlink: 'syz.0.3312': attribute type 21 has an invalid length. [ 608.852309][T16655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3312'. [ 610.438313][T16701] netlink: 'syz.1.3321': attribute type 3 has an invalid length. [ 610.601425][T16701] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3321'. [ 611.083081][T16709] netlink: 'syz.3.3326': attribute type 21 has an invalid length. [ 611.138360][T16709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3326'. [ 612.581852][T16731] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.3333'. [ 612.631593][T16731] openvswitch: netlink: Flow actions attr not present in new flow. [ 613.716653][T16749] netlink: 'syz.2.3340': attribute type 21 has an invalid length. [ 613.744939][T16749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3340'. [ 614.092498][T16753] netlink: 'syz.3.3341': attribute type 2 has an invalid length. [ 614.171470][T16753] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3341'. [ 614.429932][T16762] netlink: 'syz.2.3343': attribute type 21 has an invalid length. [ 615.440603][T16768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3344'. [ 615.683842][T16768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3344'. [ 617.011584][T16780] netlink: 'syz.2.3347': attribute type 21 has an invalid length. [ 617.019526][T16780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3347'. [ 618.202472][T16795] FAULT_INJECTION: forcing a failure. [ 618.202472][T16795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.301793][T16795] CPU: 0 PID: 16795 Comm: syz.3.3351 Not tainted syzkaller #0 [ 618.309444][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.319570][T16795] Call Trace: [ 618.322915][T16795] [ 618.325932][T16795] dump_stack_lvl+0x188/0x24e [ 618.330724][T16795] ? show_regs_print_info+0x12/0x12 [ 618.336009][T16795] ? load_image+0x400/0x400 [ 618.340615][T16795] ? __lock_acquire+0x7d10/0x7d10 [ 618.345787][T16795] should_fail_ex+0x399/0x4d0 [ 618.350582][T16795] _copy_from_user+0x2c/0x170 [ 618.355358][T16795] ___sys_recvmsg+0x172/0x590 [ 618.360181][T16795] ? __sys_recvmsg+0x290/0x290 [ 618.365085][T16795] ? common_file_perm+0x171/0x1c0 [ 618.370263][T16795] ? __fget_files+0x43d/0x4b0 [ 618.375119][T16795] __x64_sys_recvmsg+0x205/0x2e0 [ 618.380155][T16795] ? ___sys_recvmsg+0x590/0x590 [ 618.385203][T16795] ? lockdep_hardirqs_on+0x94/0x140 [ 618.390504][T16795] do_syscall_64+0x4c/0xa0 [ 618.395011][T16795] ? clear_bhb_loop+0x60/0xb0 [ 618.399782][T16795] ? clear_bhb_loop+0x60/0xb0 [ 618.404549][T16795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.410514][T16795] RIP: 0033:0x7fd528d9cdd9 [ 618.415007][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.434688][T16795] RSP: 002b:00007fd529ced028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 618.443178][T16795] RAX: ffffffffffffffda RBX: 00007fd529016090 RCX: 00007fd528d9cdd9 [ 618.451228][T16795] RDX: 0000000000002000 RSI: 0000200000001c80 RDI: 0000000000000005 [ 618.459267][T16795] RBP: 00007fd529ced090 R08: 0000000000000000 R09: 0000000000000000 [ 618.467305][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.475344][T16795] R13: 00007fd529016128 R14: 00007fd529016090 R15: 00007ffee49374d8 [ 618.483482][T16795] [ 618.696426][T16797] netlink: 'syz.0.3353': attribute type 21 has an invalid length. [ 618.731965][T16797] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3353'. [ 620.706226][T16822] netlink: 'syz.4.3359': attribute type 9 has an invalid length. [ 620.831448][T16822] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.3359'. [ 622.616509][T16842] netlink: 'syz.1.3367': attribute type 21 has an invalid length. [ 622.673852][T16842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3367'. [ 623.144019][T16851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3370'. [ 623.344218][T16852] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3369'. [ 623.649964][T16857] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3372'. [ 624.084999][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.091557][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.258230][T16863] netlink: 'syz.2.3375': attribute type 30 has an invalid length. [ 624.370503][T16862] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3384'. [ 625.434292][T16862] team0: Port device team_slave_0 removed [ 625.446717][T16866] netlink: 'syz.0.3384': attribute type 10 has an invalid length. [ 625.711978][T16866] team0 (unregistering): Port device team_slave_1 removed [ 627.384402][T16898] netlink: 'syz.4.3381': attribute type 10 has an invalid length. [ 629.622685][T16912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3385'. [ 629.828026][T16914] netlink: 'syz.3.3383': attribute type 21 has an invalid length. [ 629.905815][T16914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3383'. [ 630.432251][T16939] netlink: 'syz.2.3393': attribute type 3 has an invalid length. [ 630.460439][T16939] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3393'. [ 630.790300][T16948] netlink: 'syz.1.3395': attribute type 3 has an invalid length. [ 630.802439][T16948] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3395'. [ 631.048777][T16961] netlink: 'syz.1.3399': attribute type 22 has an invalid length. [ 631.063533][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3399'. [ 631.157168][T16964] netlink: 'syz.1.3399': attribute type 39 has an invalid length. [ 631.570279][T16964] device hsr_slave_1 left promiscuous mode [ 631.706136][T16979] netlink: 'syz.4.3403': attribute type 2 has an invalid length. [ 631.731660][T16979] netlink: 'syz.4.3403': attribute type 8 has an invalid length. [ 631.759899][T16979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3403'. [ 631.842701][T16982] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3403'. [ 632.113131][T16987] netlink: 'syz.0.3404': attribute type 21 has an invalid length. [ 632.155373][T16987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3404'. [ 632.949567][T17011] netlink: 'syz.4.3409': attribute type 10 has an invalid length. [ 633.090358][T17011] team0: Port device dummy0 added [ 633.373153][T17025] netlink: 'syz.3.3414': attribute type 27 has an invalid length. [ 633.652553][T17025] bond0: (slave bond_slave_0): Releasing backup interface [ 633.762570][ T4287] Bluetooth: hci5: ISO packet for unknown connection handle 2366 [ 633.919692][T17034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3417'. [ 633.936776][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3416'. [ 634.484462][T17037] device hsr_slave_1 left promiscuous mode [ 636.451205][T17073] validate_nla: 3 callbacks suppressed [ 636.483043][T17073] netlink: 'syz.3.3427': attribute type 10 has an invalid length. [ 637.577761][T17073] team0: Port device dummy0 added [ 637.733197][T17088] netlink: 'syz.0.3430': attribute type 21 has an invalid length. [ 637.745775][T17088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3430'. [ 637.851968][T17094] tipc: Started in network mode [ 637.857516][T17094] tipc: Node identity 9215a268, cluster identity 4711 [ 637.939615][T17094] tipc: Node number set to 2450891368 [ 638.230917][ T4287] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 638.272082][T17109] netlink: 'syz.2.3438': attribute type 41 has an invalid length. [ 639.095654][T17136] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3442'. [ 639.462161][T17147] netlink: 'syz.4.3445': attribute type 21 has an invalid length. [ 639.492236][T17147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3445'. [ 639.912567][T17153] netlink: 'syz.0.3446': attribute type 10 has an invalid length. [ 639.931839][T17157] netlink: 'syz.4.3448': attribute type 10 has an invalid length. [ 640.120949][T17157] team0: Port device geneve1 added [ 640.251487][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 640.451549][T17165] netlink: 'syz.2.3450': attribute type 10 has an invalid length. [ 640.502401][T17165] bond0: (slave bond_slave_0): Releasing backup interface [ 640.661466][T17170] netlink: 'syz.1.3451': attribute type 12 has an invalid length. [ 640.669508][T17170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3451'. [ 641.085170][T17185] netlink: 'syz.0.3456': attribute type 21 has an invalid length. [ 641.117906][T17185] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 641.137812][T17186] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.3457'. [ 641.152868][T17185] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3456'. [ 641.339364][T17190] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 641.380936][T17190] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3458'. [ 641.521487][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 641.602508][T17198] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.3461'. [ 641.768688][T17195] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3459'. [ 641.819333][T17202] validate_nla: 3 callbacks suppressed [ 641.819347][T17202] netlink: 'syz.0.3459': attribute type 46 has an invalid length. [ 641.872795][T17203] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3459'. [ 642.187439][T17216] netlink: 'syz.3.3464': attribute type 12 has an invalid length. [ 642.288270][T17218] netlink: 'syz.1.3465': attribute type 7 has an invalid length. [ 646.303011][T17254] netlink: 'syz.0.3482': attribute type 10 has an invalid length. [ 646.602805][T17266] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 647.290248][T17278] __nla_validate_parse: 2 callbacks suppressed [ 647.290263][T17278] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.3477'. [ 647.320995][T17258] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3473'. [ 647.578865][T17266] netlink: 'syz.4.3475': attribute type 10 has an invalid length. [ 647.590001][T17266] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3475'. [ 647.909896][T17293] netlink: 'syz.3.3480': attribute type 2 has an invalid length. [ 647.931376][T17293] netlink: 'syz.3.3480': attribute type 4 has an invalid length. [ 647.954692][T17293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3480'. [ 648.214908][T17306] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3485'. [ 652.592734][T17349] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 652.714505][T17349] netlink: 'syz.2.3495': attribute type 10 has an invalid length. [ 652.776765][T17349] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3495'. [ 652.989879][T17358] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3499'. [ 653.171558][T17358] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 653.337542][T17373] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3501'. [ 656.401724][T17380] netlink: 'syz.2.3504': attribute type 4 has an invalid length. [ 656.409496][T17380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3504'. [ 656.444940][T17380] .`: renamed from bond0 [ 656.764886][T17397] netlink: 'syz.4.3511': attribute type 7 has an invalid length. [ 656.799466][T17397] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.3511'. [ 657.160611][T17408] tap0: tun_chr_ioctl cmd 2147767517 [ 657.357751][T17408] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 657.399641][T17408] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3512'. [ 658.561805][T17429] netlink: 'syz.1.3519': attribute type 10 has an invalid length. [ 658.580758][T17429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3519'. [ 658.601592][T17429] device team0 entered promiscuous mode [ 658.607339][T17429] device team_slave_0 entered promiscuous mode [ 658.614024][T17429] device team_slave_1 entered promiscuous mode [ 658.631491][T17429] device geneve1 entered promiscuous mode [ 658.652346][T17429] device macvlan0 entered promiscuous mode [ 658.660690][T17429] bridge0: port 3(team0) entered blocking state [ 658.681781][T17429] bridge0: port 3(team0) entered disabled state [ 658.786419][T17449] sctp: [Deprecated]: syz.3.3522 (pid 17449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.786419][T17449] Use struct sctp_sack_info instead [ 658.835188][T17451] netlink: 'syz.4.3523': attribute type 29 has an invalid length. [ 658.859387][T17451] netlink: 'syz.4.3523': attribute type 29 has an invalid length. [ 658.887933][T17452] netlink: 'syz.4.3523': attribute type 29 has an invalid length. [ 659.407707][T17475] netlink: 'syz.3.3529': attribute type 21 has an invalid length. [ 659.426452][T17475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3529'. [ 662.370279][T17502] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3535'. [ 662.490742][T17504] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3536'. [ 663.074754][T17520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3542'. [ 663.291520][T17529] device bridge_slave_1 left promiscuous mode [ 663.317308][T17529] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.338788][T17529] device bridge_slave_0 left promiscuous mode [ 663.345644][T17529] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.737635][T17548] netlink: 'syz.4.3551': attribute type 2 has an invalid length. [ 663.754605][T17548] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3551'. [ 663.779092][T17550] netlink: 'syz.1.3550': attribute type 10 has an invalid length. [ 666.833998][T17608] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3563'. [ 667.012910][T17611] netlink: 'syz.2.3564': attribute type 10 has an invalid length. [ 667.020891][T17611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3564'. [ 667.060863][T17611] bridge0: port 3(veth0_vlan) entered blocking state [ 667.082032][T17611] bridge0: port 3(veth0_vlan) entered disabled state [ 667.090921][T17611] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 667.121441][T14773] Bluetooth: hci5: command 0x0406 tx timeout [ 670.348328][T17644] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3570'. [ 670.377056][T17644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.230807][T17658] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3576'. [ 671.272979][T17663] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3576'. [ 671.498054][T17670] netlink: 'syz.2.3578': attribute type 10 has an invalid length. [ 671.535718][T17670] team0: Port device wlan1 added [ 672.428916][T17699] netlink: 'syz.0.3585': attribute type 3 has an invalid length. [ 672.532271][T17699] netlink: 'syz.0.3585': attribute type 1 has an invalid length. [ 672.680443][T17699] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3585'. [ 675.370243][T17725] netlink: 'syz.1.3593': attribute type 21 has an invalid length. [ 675.441089][T17725] netlink: 'syz.1.3593': attribute type 27 has an invalid length. [ 675.459391][T17727] netlink: 'syz.3.3594': attribute type 21 has an invalid length. [ 675.477518][T17727] netlink: 'syz.3.3594': attribute type 3 has an invalid length. [ 675.506675][T17725] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3593'. [ 675.551332][T17727] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3594'. [ 675.651563][T17725] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.3593'. [ 675.848312][T17743] netlink: 'syz.3.3598': attribute type 21 has an invalid length. [ 675.899629][T17741] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3597'. [ 675.924006][T17746] netlink: 'syz.3.3598': attribute type 4 has an invalid length. [ 675.953638][T17741] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 676.269696][T17755] netlink: 'syz.0.3601': attribute type 3 has an invalid length. [ 676.287163][T17755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3601'. [ 677.276158][T17790] validate_nla: 1 callbacks suppressed [ 677.276174][T17790] netlink: 'syz.0.3610': attribute type 19 has an invalid length. [ 677.310429][T17790] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3610'. [ 677.721189][T17816] netlink: 'syz.4.3614': attribute type 2 has an invalid length. [ 677.760032][T17816] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3614'. [ 678.041901][T17819] can: request_module (can-proto-0) failed. [ 678.309764][T17840] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 678.336098][T17840] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3621'. [ 679.256694][T17860] netlink: 'syz.3.3627': attribute type 27 has an invalid length. [ 679.280947][T17860] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3627'. [ 680.060705][T17881] netlink: 'syz.1.3633': attribute type 19 has an invalid length. [ 680.147684][T17879] : port 1(ip6gretap0) entered blocking state [ 680.162501][T17879] : port 1(ip6gretap0) entered disabled state [ 680.176171][T17879] device ip6gretap0 entered promiscuous mode [ 680.190881][T17884] device ip6gretap0 left promiscuous mode [ 680.199628][T17884] : port 1(ip6gretap0) entered disabled state [ 680.211993][T17885] netlink: 'syz.0.3634': attribute type 10 has an invalid length. [ 680.231729][T17885] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 683.012019][T17938] netlink: 'syz.0.3650': attribute type 21 has an invalid length. [ 683.020041][T17938] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.3650'. [ 683.122806][T17941] netlink: 'syz.0.3650': attribute type 27 has an invalid length. [ 683.181514][T17941] C: renamed from team_slave_0 [ 684.178781][T17965] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3656'. [ 684.190338][T17965] netlink: zone id is out of range [ 684.210663][T17965] netlink: zone id is out of range [ 684.219151][T17965] netlink: zone id is out of range [ 684.226797][T17965] netlink: zone id is out of range [ 684.249765][T17965] netlink: zone id is out of range [ 684.261191][T17965] netlink: zone id is out of range [ 684.269228][T17965] netlink: zone id is out of range [ 684.278191][T17965] netlink: zone id is out of range [ 684.286305][T17965] netlink: zone id is out of range [ 684.297614][T17965] netlink: zone id is out of range [ 684.676442][T14773] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 684.966881][T17978] netlink: 'syz.4.3661': attribute type 28 has an invalid length. [ 684.996785][T17978] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3661'. [ 685.006653][T17979] netlink: 'syz.0.3662': attribute type 2 has an invalid length. [ 685.039493][T17979] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3662'. [ 685.080855][T17978] netlink: 'syz.4.3661': attribute type 11 has an invalid length. [ 685.171482][T17978] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3661'. [ 685.524916][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.534525][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.787462][T17976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.629824][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 690.540521][T18069] netlink: 'syz.4.3685': attribute type 2 has an invalid length. [ 690.579726][T18069] netlink: 'syz.4.3685': attribute type 8 has an invalid length. [ 690.699151][T18069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3685'. [ 692.424100][T18092] netlink: 'syz.3.3690': attribute type 1 has an invalid length. [ 692.450301][T18095] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3691'. [ 692.471331][T18092] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.3690'. [ 692.643201][T18106] netlink: 'syz.4.3692': attribute type 2 has an invalid length. [ 692.661209][T18106] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3692'. [ 692.876556][T18118] netlink: 'syz.1.3694': attribute type 10 has an invalid length. [ 692.885550][T18118] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3694'. [ 693.007711][T18120] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.3697'. [ 693.413408][T18127] delete_channel: no stack [ 694.516672][T18150] netlink: 'syz.1.3705': attribute type 3 has an invalid length. [ 694.570414][T18150] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3705'. [ 695.051936][T18165] netlink: 'syz.3.3706': attribute type 3 has an invalid length. [ 695.201341][T18165] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3706'. [ 698.436579][T18215] netlink: 'syz.4.3721': attribute type 4 has an invalid length. [ 698.454674][T18215] netlink: 'syz.4.3721': attribute type 8 has an invalid length. [ 698.476104][T18215] netlink: 193092 bytes leftover after parsing attributes in process `syz.4.3721'. [ 698.710369][T18220] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 698.719135][T18220] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3723'. [ 699.066088][T18236] netlink: 'syz.4.3728': attribute type 10 has an invalid length. [ 699.085125][T18236] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3728'. [ 699.667986][T18239] netlink: 'syz.0.3739': attribute type 3 has an invalid length. [ 699.680406][T18239] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3739'. [ 702.031397][T18246] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3730'. [ 702.248843][T18251] sctp: [Deprecated]: syz.2.3731 (pid 18251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.248843][T18251] Use struct sctp_sack_info instead [ 702.497842][T18262] netlink: 'syz.2.3735': attribute type 3 has an invalid length. [ 702.505830][T18262] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3735'. [ 702.525704][T18262] netlink: 'syz.2.3735': attribute type 29 has an invalid length. [ 702.550391][T18264] netlink: 192432 bytes leftover after parsing attributes in process `syz.3.3736'. [ 702.565947][T18264] net_ratelimit: 18 callbacks suppressed [ 702.565959][T18264] netlink: get zone limit has 4 unknown bytes [ 702.588714][T18262] netlink: 'syz.2.3735': attribute type 29 has an invalid length. [ 702.698358][T18272] netlink: 'syz.0.3738': attribute type 2 has an invalid length. [ 702.718231][T18265] netlink: 'syz.2.3735': attribute type 10 has an invalid length. [ 702.832440][T18265] device hsr0 entered promiscuous mode [ 702.881754][T18265] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 702.911475][T18265] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 702.931172][T18265] .`: (slave hsr0): Error -95 calling set_mac_address [ 702.961602][T14773] Bluetooth: hci1: command 0x0406 tx timeout [ 702.974494][T18272] device 0 entered promiscuous mode [ 703.237665][T18285] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3743'. [ 703.569475][T18296] validate_nla: 2 callbacks suppressed [ 703.569490][T18296] netlink: 'syz.3.3747': attribute type 2 has an invalid length. [ 703.620997][T18296] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3747'. [ 703.696624][T18298] netlink: 'syz.3.3747': attribute type 21 has an invalid length. [ 703.741373][T18298] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3747'. [ 703.761123][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 703.802320][T18289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3745'. [ 704.726827][T18347] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3758'. [ 704.764123][T18346] delete_channel: no stack [ 705.127508][T18354] can: request_module (can-proto-0) failed. [ 705.452200][T18367] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3765'. [ 705.510701][T18367] netlink: zone id is out of range [ 705.516459][T18367] netlink: zone id is out of range [ 705.543949][T18367] netlink: del zone limit has 4 unknown bytes [ 705.561842][T18373] netlink: 'syz.4.3764': attribute type 39 has an invalid length. [ 705.950629][T18389] bond0: (slave dummy0): Error: Slave device does not support XDP [ 707.197555][T18408] netlink: 'syz.4.3775': attribute type 2 has an invalid length. [ 707.212584][T18408] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3775'. [ 709.758413][T18440] netlink: 'syz.3.3782': attribute type 3 has an invalid length. [ 709.773502][T18441] netlink: 'syz.3.3782': attribute type 3 has an invalid length. [ 709.781452][T18441] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3782'. [ 709.791282][T18440] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3782'. [ 711.037897][T18410] netlink: 'syz.4.3776': attribute type 13 has an invalid length. [ 711.046342][T18410] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3776'. [ 711.059059][T18410] syz_tun: refused to change device tx_queue_len [ 711.066087][T18410] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 711.091598][T18413] netlink: 'syz.4.3776': attribute type 13 has an invalid length. [ 711.105213][T18413] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3776'. [ 711.116707][T18413] syz_tun: refused to change device tx_queue_len [ 711.142312][T18413] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 711.159533][T18417] netlink: 'syz.4.3776': attribute type 10 has an invalid length. [ 711.201800][T18417] team0: Port device netdevsim0 added [ 711.816853][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 712.244643][T18477] netlink: 'syz.3.3792': attribute type 27 has an invalid length. [ 712.265802][T18477] netlink: 'syz.3.3792': attribute type 3 has an invalid length. [ 712.309622][T18477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3792'. [ 712.483913][T18488] netlink: 'syz.1.3795': attribute type 4 has an invalid length. [ 712.492821][T18488] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3795'. [ 712.740742][T18495] device sit0 entered promiscuous mode [ 713.029110][T18518] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3803'. [ 713.047810][T18518] netlink: 'syz.0.3803': attribute type 46 has an invalid length. [ 713.059062][T18518] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3803'. [ 713.072732][T18518] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3803'. [ 713.084205][T18493] delete_channel: no stack [ 713.110306][T18518] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 713.141487][T18518] CPU: 0 PID: 18518 Comm: syz.0.3803 Not tainted syzkaller #0 [ 713.148993][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 713.159080][T18518] Call Trace: [ 713.162393][T18518] [ 713.165355][T18518] dump_stack_lvl+0x188/0x24e [ 713.170094][T18518] ? show_regs_print_info+0x12/0x12 [ 713.175331][T18518] ? load_image+0x400/0x400 [ 713.179884][T18518] sysfs_warn_dup+0x8a/0xa0 [ 713.184445][T18518] sysfs_do_create_link_sd+0xc0/0x110 [ 713.189853][T18518] device_add+0x7ed/0xfb0 [ 713.194202][T18518] wiphy_register+0x1d9f/0x2ac0 [ 713.199106][T18518] ? cfg80211_event_work+0x40/0x40 [ 713.204269][T18518] ? minstrel_ht_alloc+0x894/0xa20 [ 713.209451][T18518] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 713.215568][T18518] ieee80211_register_hw+0x2d00/0x39f0 [ 713.221123][T18518] ? ieee80211_register_hw+0xf21/0x39f0 [ 713.226724][T18518] ? ieee80211_register_hw+0xf21/0x39f0 [ 713.232336][T18518] ? ieee80211_tasklet_handler+0x20/0x20 [ 713.238018][T18518] ? memset+0x1e/0x40 [ 713.242030][T18518] ? __hrtimer_init+0x186/0x270 [ 713.247005][T18518] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 713.252782][T18518] hwsim_new_radio_nl+0xafa/0xce0 [ 713.257867][T18518] genl_family_rcv_msg_doit+0x22a/0x330 [ 713.263453][T18518] ? end_current_label_crit_section+0x170/0x170 [ 713.269733][T18518] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 713.275668][T18518] ? bpf_lsm_capable+0x5/0x10 [ 713.280389][T18518] ? security_capable+0x85/0xb0 [ 713.285278][T18518] genl_rcv_msg+0x604/0x790 [ 713.289835][T18518] ? genl_bind+0x360/0x360 [ 713.294279][T18518] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 713.300669][T18518] netlink_rcv_skb+0x1fb/0x450 [ 713.305474][T18518] ? genl_bind+0x360/0x360 [ 713.309947][T18518] ? netlink_ack+0x1170/0x1170 [ 713.314768][T18518] ? down_read+0x1a8/0x2d0 [ 713.319242][T18518] genl_rcv+0x24/0x40 [ 713.323289][T18518] netlink_unicast+0x74d/0x8d0 [ 713.328115][T18518] netlink_sendmsg+0x8ad/0xbd0 [ 713.332938][T18518] ? netlink_getsockopt+0x550/0x550 [ 713.338172][T18518] ? aa_sock_msg_perm+0x94/0x150 [ 713.343127][T18518] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 713.348430][T18518] ? security_socket_sendmsg+0x7c/0xa0 [ 713.353913][T18518] ? netlink_getsockopt+0x550/0x550 [ 713.359151][T18518] ____sys_sendmsg+0x5be/0x970 [ 713.363975][T18518] ? __sys_sendmsg_sock+0x30/0x30 [ 713.369068][T18518] ? __import_iovec+0x315/0x500 [ 713.373949][T18518] ? import_iovec+0x6f/0xa0 [ 713.378456][T18518] ___sys_sendmsg+0x2a2/0x360 [ 713.383139][T18518] ? try_to_wake_up+0x67c/0x1080 [ 713.388105][T18518] ? __sys_sendmsg+0x290/0x290 [ 713.392980][T18518] __se_sys_sendmsg+0x1bb/0x2a0 [ 713.397922][T18518] ? __x64_sys_sendmsg+0x80/0x80 [ 713.402928][T18518] ? lockdep_hardirqs_on+0x94/0x140 [ 713.408165][T18518] do_syscall_64+0x4c/0xa0 [ 713.412627][T18518] ? clear_bhb_loop+0x60/0xb0 [ 713.417341][T18518] ? clear_bhb_loop+0x60/0xb0 [ 713.422052][T18518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.427984][T18518] RIP: 0033:0x7fa4abb9cdd9 [ 713.432439][T18518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.452082][T18518] RSP: 002b:00007fa4acb3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.460573][T18518] RAX: ffffffffffffffda RBX: 00007fa4abe15fa0 RCX: 00007fa4abb9cdd9 [ 713.468591][T18518] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 713.476626][T18518] RBP: 00007fa4abc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 713.484641][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.492641][T18518] R13: 00007fa4abe16038 R14: 00007fa4abe15fa0 R15: 00007ffe3f3b52a8 [ 713.500659][T18518] [ 713.619922][T18527] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 713.627029][T18527] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 713.646728][T18527] syzkaller1: Linktype set failed because interface is up [ 713.723321][T18531] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 714.961150][T18557] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3815'. [ 714.991351][T18557] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 715.021495][T18557] netlink: 'syz.4.3815': attribute type 6 has an invalid length. [ 715.049236][T18557] netlink: 'syz.4.3815': attribute type 30 has an invalid length. [ 715.607198][T18575] netlink: 'syz.4.3820': attribute type 10 has an invalid length. [ 715.645094][T18578] device bridge_slave_1 left promiscuous mode [ 715.653036][T18578] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.699053][T18578] device bridge_slave_0 left promiscuous mode [ 715.747071][T18578] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.914095][T14773] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 720.005209][T18636] tc_dump_action: action bad kind [ 720.228311][T18636] device syzkaller0 entered promiscuous mode [ 721.367021][T14773] ------------[ cut here ]------------ [ 721.373837][T14773] WARNING: CPU: 0 PID: 14773 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 721.383854][T14773] Modules linked in: [ 721.387808][T14773] CPU: 0 PID: 14773 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 721.395554][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.405693][T14773] Workqueue: hci3 hci_conn_timeout [ 721.410876][T14773] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 721.416644][T14773] Code: 1f 8e e8 84 6e 9e f8 48 8b 35 05 e1 ea 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 3a 1f f8 e8 21 62 4d f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 721.436357][T14773] RSP: 0018:ffffc90003ef7c08 EFLAGS: 00010293 [ 721.442517][T14773] RAX: ffffffff8935132f RBX: ffff88805994e330 RCX: ffff8880250bbb80 [ 721.450531][T14773] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 721.458579][T14773] RBP: 00000000ffffffff R08: ffff88805994e013 R09: 1ffff1100b329c02 [ 721.466647][T14773] R10: dffffc0000000000 R11: ffffed100b329c03 R12: dffffc0000000000 [ 721.474698][T14773] R13: dffffc0000000000 R14: ffff88805994e000 R15: ffff88805994e010 [ 721.482759][T14773] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 721.491764][T14773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 721.498388][T14773] CR2: 0000200000086000 CR3: 000000004a549000 CR4: 00000000003506f0 [ 721.506449][T14773] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 721.514491][T14773] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 721.522555][T14773] Call Trace: [ 721.525880][T14773] [ 721.528870][T14773] ? process_one_work+0x7b0/0x1160 [ 721.534083][T14773] process_one_work+0x8a2/0x1160 [ 721.539086][T14773] ? worker_detach_from_pool+0x240/0x240 [ 721.544813][T14773] ? _raw_spin_lock_irq+0x86/0xf0 [ 721.549896][T14773] ? _raw_spin_lock_irq+0xb7/0xf0 [ 721.555037][T14773] ? _raw_spin_lock_irqsave+0x100/0x100 [ 721.560628][T14773] ? kthread_data+0x4b/0xc0 [ 721.565252][T14773] worker_thread+0xaa2/0x1270 [ 721.570002][T14773] ? __kthread_parkme+0x162/0x1c0 [ 721.575138][T14773] kthread+0x29d/0x330 [ 721.579252][T14773] ? worker_clr_flags+0x1a0/0x1a0 [ 721.584382][T14773] ? kthread_blkcg+0xd0/0xd0 [ 721.589018][T14773] ret_from_fork+0x1f/0x30 [ 721.593557][T14773] [ 721.596615][T14773] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 721.603909][T14773] CPU: 0 PID: 14773 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 721.611560][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.621639][T14773] Workqueue: hci3 hci_conn_timeout [ 721.626793][T14773] Call Trace: [ 721.630097][T14773] [ 721.633058][T14773] dump_stack_lvl+0x188/0x24e [ 721.637785][T14773] ? memcpy+0x3c/0x60 [ 721.641796][T14773] ? show_regs_print_info+0x12/0x12 [ 721.647031][T14773] ? load_image+0x400/0x400 [ 721.651579][T14773] panic+0x2e5/0x730 [ 721.655507][T14773] ? bpf_jit_dump+0xd0/0xd0 [ 721.660026][T14773] ? ret_from_fork+0x1f/0x30 [ 721.664638][T14773] __warn+0x2f8/0x4f0 [ 721.668637][T14773] ? hci_conn_timeout+0x24f/0x450 [ 721.673673][T14773] ? hci_conn_timeout+0x24f/0x450 [ 721.678704][T14773] report_bug+0x2ba/0x4f0 [ 721.683061][T14773] ? hci_conn_timeout+0x24f/0x450 [ 721.688116][T14773] handle_bug+0x3a/0x70 [ 721.692292][T14773] exc_invalid_op+0x16/0x40 [ 721.696819][T14773] asm_exc_invalid_op+0x16/0x20 [ 721.701678][T14773] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 721.707327][T14773] Code: 1f 8e e8 84 6e 9e f8 48 8b 35 05 e1 ea 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 3a 1f f8 e8 21 62 4d f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 721.726943][T14773] RSP: 0018:ffffc90003ef7c08 EFLAGS: 00010293 [ 721.733016][T14773] RAX: ffffffff8935132f RBX: ffff88805994e330 RCX: ffff8880250bbb80 [ 721.740996][T14773] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 721.748985][T14773] RBP: 00000000ffffffff R08: ffff88805994e013 R09: 1ffff1100b329c02 [ 721.756962][T14773] R10: dffffc0000000000 R11: ffffed100b329c03 R12: dffffc0000000000 [ 721.764953][T14773] R13: dffffc0000000000 R14: ffff88805994e000 R15: ffff88805994e010 [ 721.772949][T14773] ? hci_conn_timeout+0x24f/0x450 [ 721.777993][T14773] ? hci_conn_timeout+0x24f/0x450 [ 721.783027][T14773] ? process_one_work+0x7b0/0x1160 [ 721.788150][T14773] process_one_work+0x8a2/0x1160 [ 721.793114][T14773] ? worker_detach_from_pool+0x240/0x240 [ 721.798755][T14773] ? _raw_spin_lock_irq+0x86/0xf0 [ 721.803794][T14773] ? _raw_spin_lock_irq+0xb7/0xf0 [ 721.808831][T14773] ? _raw_spin_lock_irqsave+0x100/0x100 [ 721.814390][T14773] ? kthread_data+0x4b/0xc0 [ 721.818913][T14773] worker_thread+0xaa2/0x1270 [ 721.823614][T14773] ? __kthread_parkme+0x162/0x1c0 [ 721.828674][T14773] kthread+0x29d/0x330 [ 721.832752][T14773] ? worker_clr_flags+0x1a0/0x1a0 [ 721.837790][T14773] ? kthread_blkcg+0xd0/0xd0 [ 721.842398][T14773] ret_from_fork+0x1f/0x30 [ 721.846841][T14773] [ 721.850434][T14773] Kernel Offset: disabled [ 721.854822][T14773] Rebooting in 86400 seconds..